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E-mail  Management: 

Controlling  Content  Chaos 

In  the  Technology  section:  Managing  e-mail 
content  has  become  a  mission-critical  task  that 
IT  needs  to  address  on  three  fronts:  incoming, 
outgoing  and  archiving.  Page  25 


IN  DEPTH 

is  extending  its 
Software  Asset  Management 
program  to  appease  critics  who 
charge  that  the  company  has 
used  the  threat  of  an  audit 
to  get  them  to  join  up. 
BEGINS  ON  PAGE  6. 


flAn  Indiana  hospital  is  set  to  roll 

out  voice-over-Wi-Fi  phones 
to  some  of  its  nurses  to  enhance 
their  mobility  and  cut  costs. 

4A  Visa  and  MasterCard  in  the  next 
XL  30  to  60  days  plan  to  update 
the  PCI  data  security  standard  to 
better  protect  credit  card  data. 

4A  Metastorm  BPM  7’s  comprehen- 
I L  sive  view  of  business  processes 
may  give  it  a  leg  up  on  competitors. 

MSun  this  week  will  announce 
new  servers,  including  one  that 
can  support  up  to  eight  dual-core 
chips  for  virtualization  projects. 

4A  Global  Dispatches:  A  South 
IU  Korean  court  rejects  Micro¬ 
soft’s  request  to  delay  imposing 
penalties  in  an  antitrust  case  until 
its  appeal  is  heard;  and  Telecom 
Italia  makes  a  bid  to  buy  AOL’s 
businesses  in  France  and  Germany. 

4 A  Q&A:  Symantec  CEO  John 
lUThompson  talks  about  his 
company’s  plans  to  take  on  Micro¬ 
soft  as  It  brings  out  security  tools. 

4  A  Cisco  unveils  new  tools  that  can 
lUmanage  both  InfiniBand  and 
Ethernet  networking  technologies. 

MCA  has  bundled  several  prod¬ 
ucts,  services  and  training 
offerings  into  a  package  to  help 
customers  deploy  ITIL  processes. 


TECHNOLOGY 

AA  Hard  Cores.  Multiprocessor 
CaU  chips  provide  incredible 
gains  in  computing  power,  but  re¬ 
engineering  software  to  take  ad¬ 
vantage  of  them  is  a  daunting  task. 

04  Future  Watch:  It’s  All  About  the 
W I  Image.  Many  people  think  of 
Xerox  as  the  copier  company,  but 
its  Xerox  Innovation  Group  is 
working  at  the  intersection  of 
information  and  documents. 

QA  Security  Manager’s  Journal: 
Ub  Even  a  Manager’s  Technical 
Skills  Need  Sharpening.  A  training 
budget  windfall  for  her  team  gives 
C.J.  Kelly  an  idea:  She  could  use 
some  skills  enhancement  too. 


MANAGEMENT 

AC  Vital  Signs:  Harder  Hires; 

UU  Tougher  Turnover.  Have  you 
been  spoiled  by  years  of  plentiful 
top-level  talent  and  easy  worker 
retention?  Our  online  survey  of 
300  IT  leaders  indicates  that  it  may 
be  time  for  an  attitude  adjustment. 

M  Steering  the  Steering  Commit¬ 
tee.  Guiding  the  activities  of 
your  IT  governance  group  and 
getting  the  most  out  of  its  efforts 
can  be  tricky.  Four  IT  executives 
share  their  ideas  and  strategies  for 
working  effectively  with  steering 
committees. 

i  A  Career  Watch.  Answers  to 
*f  U  readers’  questions  about 
education  choices  and  career 
directions.  Also,  what’s  behind 
the  decline  in  computer  science 
enrollments?  And  how  come 
Americans  can’t  seem  to  master 
that  vacation  thing? 


When  HQ  Is  Over  There 

In  the  Management  section:  CIO  Russ  Finney  of  Tokyo 
Electron  America  knows  it  takes  a  combination  of  keen 
observation  skills,  social-sawy  and  intuition  for  CIOs 
of  U.S.  subsidiaries  to  strike  up  successful  relationships 
with  executives  located  half  a  world  away.  Page  38 


OPINIONS 


4A  On  the  Mark:  Mark  Hall  takes 
IU  a  look  at  software  that  cen¬ 
tralizes  a  company’s  ethical 
information. 


AA  Don  Tennant  is  confident  that 
LL  age  isn’t  the  employment 
obstacle  it  once  may  have  been, 
regardless  of  what  you  think  of 
the  argument  that  skilled  IT  tal¬ 
ent  is  increasingly  difficult  to  find 
and  keep. 

AA  Michael  H.  Hugos  delivers 
LL  an  example  of  the  value  of 
IT  agility. 

MCurt  A.  Monash  outlines  the 
steps  organizations  need  to 
take  to  manage  the  words  that  are 
among  their  most  valuable  assets. 

«Bart  Perkins  cautions  that  de¬ 
mands  for  IT  innovation  will 
go  unmet  if  the  organization  isn’t 
structured  in  a  way  that  fosters 
innovation. 

J  A  Frankly  Speaking:  Frank  Hayes 

*f  U  suggests  an  easy  way  for  IT 
to  look  business-savvy. 
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Online  Job  Networks 
For  the  55-Plus  Crowd 

CAREERS:  Companies  are  eager  to  lure  back 
to  the  workforce  retirees  with  decades  of 
experience,  writes  CareerJournaV s  Kristi 
Essick.  Find  out  what  Web  resources  are 
available  for  those  not  ready  to  call  it  quits. 
9  www.computerworld.com/careers 

The  Second  Factor 

PRIVACY:  Columnist  Jay  Cline  offers  some 
alternatives  for  two-factor  authentication. 

9  www.computerworld.com/security 

Developing  a 
Reference  Architecture 

STORAGE:  A  surprising  number  of  infrastruc¬ 
ture  projects  seem  to  start  from  the  bottom 
up  instead  of  the  top  down,  likely  because  of 
vendor  prodding.  Columnist  Jim  Damoula- 
kis  offers  some  advice  on  proper  planning. 

9  www.computerworfd.com/storage 

Keep  Your  Site  Up  in  a  Disaster 

NETWORKING:  Greg  Schaffer  prepared  a  plan 
to  maintain  emergency  Web  communica¬ 
tions  in  the  event  of  a  disaster  and  soon 
found  his  DNS  redirect  plan  put  to  the  test. 

9  www.computerworld.com/networking 

Back  From  the  Brink 

WEBCAST:  Last  year’s  hurricane  season 
brought  chaos  to  IT  shops  across  the  South¬ 
east.  In  this  webcast,  recorded  at  the  2006 
Premier  100  IT  Leaders  Conference,  a  panel 
of  IT  managers  offer  a  candid  view  of  where 
and  how  their  IT  and  business  continuity 
plans  worked,  what  they  didn’t  see  coming, 
and  how  they  plan  to  prepare  and  respond 
the  next  time  disaster  strikes. 

9  www.computerworld.com/webcasts 
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NEWS 


Users  Leery  of  Microsoft  License 


Question  vendor’s  insistance  that 
SAM  program  isn’t  an  audit 


Auto  Warehousing  CIO  DALE  FRANTZ  says  he  had  “a  few  sleepless  nights” 
after  Microsoft  contacted  him  about  what  it  called  an  “urgent  matter.” 


m 


BY  CAROL  SLIWA 

ARRY  LIBENSON,  CIO 
at  Ingersoll-Rand 
Co.,  was  skeptical 
earlier  this  year  when 
Microsoft  Corp.  contacted 
his  company  about  possible 
license-compliance  problems 
yet  insisted  it  had  no  plans  to 
pursue  an  audit. 

Microsoft  claimed  that  the 
Hamilton,  Bermuda-based 
tools  and  machinery  manufac¬ 
turer  likely  didn’t  have  enough 
Office  licenses,  nor  enough 
client-access  licenses  for  SQL 
Server,  based  on  its  experi¬ 
ences  with  customers  of  com¬ 
parable  size  and  revenue. 

But  instead  of  invoking 
the  audit  clause  in  Ingersoll- 
Rand’s  contract,  Microsoft 
suggested  a  collaborative  ap¬ 
proach  and  offered  to  engage  a 
third-party  consultant  to  help 
the  company  reconcile  the 
products  it  was  using  versus 
the  software  it  had  purchased. 

“We  said,  ‘This  sounds  like 
an  audit,’  ”  recalled  Libenson. 
“But  they  recoiled  when  I  used 
the  word  audit.  They  said, 
‘This  isn’t  an  audit.’  It  was  al¬ 
most  like  a  script  to  make  sure 
we  didn’t  feel  that  way.” 

During  the  past  year,  Micro¬ 
soft  has  approached  some 
1.200  U.S.-based  corporate 
customers  it  suspects  may 
not  be  licensed  properly, 
based  on  the  data  mining  of 
its  volume-purchase  history 
records,  according  to  Juan 
Fernando  Rivera,  the  software 
maker’s  director  of  worldwide 
software  asset  management. 

But  Rivera  swears  that  li¬ 
cense  compliance  wasn’t  the 
driving  factor  and  audits  won’t 
be  forthcoming,  even  though 
Microsoft  often  suggests  po¬ 
tential  license  problems  in 
its  initial  customer  contact. 
Instead,  Microsoft  is  trying 
to  persuade  those  customers 
to  participate  in  its  Software 
Asset  Management  (SAM) 
orogram,  which  kicked  off 
t  wo  years  ago  in  the  U.K.  and 


launched  a  year  ago  in  the  U.S. 

Under  the  program,  Micro¬ 
soft  pays  for  its  consulting 
partners  to  educate  customers 
on  the  merits  of  asset  man¬ 
agement,  help  inventory  their 
installed  software,  compare 
the  inventory  with  license 
documentation,  and  make 
recommendations  on  policies 
and  procedures.  In  the  end, 
the  customers  get  a  chance  to 
pay  for  unlicensed  software,  or 
“true  up,”  without  penalty. 

So  far,  570  U.S.-based  com¬ 
panies  either  have  completed 
a  free  SAM  engagement  or 
are  in  the  process  of  doing 
so  with  a  Microsoft  partner 
— 132  of  which  have  attained 
SAM  certification  since  it  be¬ 
came  available  in  November, 
according  to  Microsoft.  The 
software  maker  plans  to  spot¬ 
light  the  SAM  program  this 
week  in  Boston  at  its  annual 
Worldwide  Partner  Confer¬ 
ence,  as  it  works  to  scale  the 
model  during  the  coming  year, 
Rivera  said. 

But  before  moving  too  far 
ahead,  Rivera  acknowledged 
that  Microsoft  might  need  to 
look  back  to  revise  some  of 
the  heavy-handed  tactics  that 
have  bothered  some  custom¬ 
ers,  causing  them  to  question 
the  program’s  purpose. 

A  Computerworld  investiga¬ 


tion  involving  51  companies 
—  including  14  that  Microsoft 
contacted  about  the  SAM 
program  —  showed  that  many 
U.S.-based  IT  managers  were 
confused,  distrustful  or  down¬ 
right  angry  after  their  com¬ 
panies  had  been  accused  of 
potential  licensing  problems 
in  connection  with  pitches 
from  Microsoft  SAM  repre¬ 
sentatives.  In  some  cases,  they 
later  learned  that  the  pitches 
were  based  on  Microsoft’s  ad¬ 
mittedly  incomplete  records. 
Some  IT  managers  said  they 
felt  pressured  to  sign  up  for 
SAM  reviews,  and  others  said 
they  resented  the  threatening 
tone  of  e-mails  and  telephone 
calls  that  sometimes  escalated 
if  they  balked  at  participation 
in  the  SAM  program. 

“Let’s  be  honest.  If  I  didn’t 
feel  pressure,  I  wouldn’t  have 


done”  the  SAM  engagement, 
said  Charles  Smith,  IT  direc¬ 
tor  of  New  York-based  Plaza 
Construction  Corp. 

In  the  end,  the  program 
worked  well  for  him.  He  said 
he  picked  up  some  useful  tips 
and  confirmed  that  his  record¬ 
keeping  had  been  solid.  Plaza 
had  to  pay  Microsoft  for  only 
two  pieces  of  software  worth 
$1,000  when  done,  he  said. 

The  positive  experience 
with  his  SAM  consultant, 
Universal  Management  Solu¬ 
tions  LLC,  took  the  sting  away 
from  his  initial  dealings  with 
Microsoft’s  SAM  engagement 
manager,  who  claimed  Plaza’s 
Office  and  client-access  licens¬ 
es  didn’t  match  up. 

“They  basically  admit,  ‘Our 
database  can  be  wrong;  it 
probably  is  wrong,’  ”  Smith 
said.  He  later  learned  that 


MICROSOFT’S  SOFTWARE  ASSET  MANAGEMENT  PROGRAM 


What’s  in  It  for  Me? 


PARTNER 


Closer  relationship  with  Microsoft. 


A  r 


MICROSOFT 


Revenue  from  unpaid  licenses. 


■  Payment  from  Microsoft  lor  a  SAM  engagement 

with  customer. 

*  Opportunity  to  sell  SAM  consulting  services  or 

SAM  tools  following  SAM  engagement. 


■  Opportunity  to  bring  customers  into  license  com¬ 
pliance  through  less-adversarial  process  than  formal  audit. 

■  Potential  for  lucrative  license  deals  with  companies 
it  believes  lack  adequate  licenses. 
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CUSTOMER 


*  Free  software  asset  management  engagement  with 
Microsoft  partner;  includes  inventory  of  installed  software 
to  be  compared  with  license  documentation,  recommenda¬ 
tions  for  policies  and  procedures  fo  better  manage  IT  assets. 


■  Chance  to  pay  Microsoft  without  penalty  for  any  unli¬ 
censed  software  discovered  during  review  process. 

■  Opportunity  to  move  to  a  more-beneficial  licensing 
agreement  after  gaining  control  and  better  understanding 
of  IT  assets. 
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Checks 

Microsoft’s  records  indicated 
Plaza’s  installed  base  was  680 
when  it’s  really  about  250,  he 
added. 

“I  definitely  will  say  I  was 
angry,”  Smith  said. 

The  irony  is  that  the  SAM 
program’s  goal  is  to  “build  a 
customer  for  life,”  said  Rivera. 
He  said  Microsoft  assumes 
positive  intent  on  the  custom¬ 
er’s  part  and  is  just  trying  to 
solve  customers’  problems. 
“Customers  are  sometimes  out 
of  compliance  without  their 
even  knowing,”  he  noted. 

Risky  Business 

But  it  can  be  risky  business 
making  accusations  when  re¬ 
cords  are  incomplete.  Rivera 
noted  that  Microsoft  does  not 
track  purchases  made  with 
hardware  makers  or  purchases 
of  “full-packaged”  products 
from  retail  stores.  That’s 
why  it’s  so  important  for  the 
customer,  the  partner  and  Mi¬ 
crosoft  to  sit  down  and  have  a 
discussion,  he  said. 

For  “customers  that  have 
very  low-volume  license  pene¬ 
tration,”  Rivera  acknowledged, 
“we  really  don’t  have  much  in 
terms  of  records.” 

Auto  Warehousing  Co.  is 
a  dedicated  Microsoft  shop, 
yet  it  doesn’t  have  a  volume¬ 
licensing  contract  to  purchase 
the  vendor’s  software  at 
discounted  rates.  CIO  Dale 
Frantz  said  he  knows  the 
Tacoma,  Wash.-based  im- 
ported-auto  processor  pays 
more  than  it  would  with  a 
volume  license,  but  he  prefers 
that  method  to  help  with  as¬ 
set  tracking  of  the  company’s 
desktops. 

Every  time  Auto  Warehous¬ 
ing  buys  a  PC  from  one  of  its 
two  resellers  or  a  local  retail 
store,  Frantz  has  a  record 
of  all  of  the  software  on 
the  machine.  He  noted  that 
whenever  the  company  needs 
more  client-access  licenses  for 
Microsoft  server  products,  it 
always  buys  extra  “so  we  con¬ 
stantly  stay  ahead.” 

“When  I  was  promoted  to 
be  head  of  IT  eight  years  ago,  I 
vowed  we  would  never  have  a 
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Indiana  Hospital  Readies  Voice-Over-Wi-Fi  for  Nurses 


BY  MATT  HAMBLEN 

Nurses  will  soon  be  using 
voice-over-Wi-Fi  phones  in 
a  hospital  in  Indiana  as  part 
of  an  effort  to  improve  their 
mobility  and  reduce  network 
costs,  an  IT  o  cial  said  last 
week. 

“We  think  that  technology 
will  really  take  off,  giving 
each  nurse  one  phone  and  one 
number  and  using  the  same 
wireless  network  that  data 
is  already  on,”  said  Dan  Al¬ 
ice,  a  technical  specialist  at 
Hancock  Regional  Hospital  in 
Greenfield,  Ind. 

Allee  said  he  and  consul¬ 
tants  believe  that  switches 
and  wireless  access  points 
from  Extreme  Networks  Inc. 
that  the  hospital  added  last 
year  will  preserve  security 


and  privacy  for  voice  conver¬ 
sations  and  also  prove  to  be 
reliable.  About  50  nurses  on 
a  hospital  staff  totaling  800 
will  use  the  voice-over-Wi-Fi 
phones,  which  are  expected  to 
be  rolled  out  by  the  end  of  the 
year,  Allee  said. 

The  hospital,  which  has  106 
beds  and  five  branch  facilities, 
is  currently  evaluating  phones 
from  three  equipment  makers: 
Cisco  Systems  Inc.,  Vocera 
Communications  Inc.  and 
SpectraLink  Corp. 

In  general,  hospitals  have 
to  take  care  when  installing 
voice-over-Wi-Fi  systems  to 
ensure  that  private  conversa¬ 
tions  can’t  be  monitored  and 
that  the  supporting  hardware 
can  support  multiple  users, 
said  Jack  Gold,  an  analyst  at 


J.Gold  Associates  in  North- 
boro,  Mass. 

Allee  said  Hancock  in¬ 
stalled  more  than  30  of  Ex¬ 
treme’s  Altitude  350-2  access 
points  last  year  to  address 
such  security  and  scalability 
concerns.  “We’re  very  im¬ 
pressed  with  the  throughput 
of  the  APs,  as  well  as  the  cov¬ 
erage,”  he  said. 

Voice  streams  will  take  a 
different  pathway  through 
the  system  than  data  streams, 
thanks  to  separate  access  do¬ 
mains  governed  by  Extreme 
Summit  WM  series  switches, 
Allee  said.  The  system  has 
been  tested  to  support  “more 
users  than  we  would  ever 
need,”  he  said. 

The  hospital  already  has 
about  250  IP  wired  phones  on 


the  system,  some  at  remote 
sites.  Toll  costs  on  some  of  the 
remote  site  calls  have  been 
completely  eliminated,  which 
will  cut  annual  operating  costs 
for  calls  to  those  sites  by  50% 
over  five  years,  Allee  said.  He 
could  not  provide  an  estimate 
of  the  overall  savings  but  said 
the  convergence  project  has 


yielded  greater  network  flexi¬ 
bility  and  the  ability  to  support 
a  wider  array  of  collaboration 
applications. 

Allee  said  Hancock  chose 
Extreme’s  networking  prod¬ 
ucts  primarily  because  “they 
were  the  best  in  their  particu¬ 
lar  line.” 

“[Extreme  is]  big  enough, 
and  we  wanted  to  make  sure 
they  would  be  around  for  a 
while,”  he  said. » 


Hancock  Network  Features 


■  One  Extreme  BlackDiamond  8810  switch,  providing  core  switching 
functionality  for  voice  over  IP  and  data. 

■  Three  Extreme  Summit  WM  series  switches  for  part  of  the  Wi-Fi 
network  support. 

■  More  than  30  Extreme  Altitude  access  points  for  Wi-Fi  access. 

■  250  wired  IP  phones. 

■  Voice-over-Wi-Fi  phones  for  50  nurses  (to  be  rolled  out  soon). 
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Dinosaurs  always  leave  huge  footprints 


is  every  square  inch  of  your  data  center  occupied  by  space-hogging  servers  of  another  era?  it's  time  to  pack 
more  power  into  your  data  center  with  systems  based  on  the  Dual-Core  AMD  Opteron™  processor.  They’re 
designed  to  generate  less  heat  in  biade  server  environments,  so  you  can  achieve  higher  server  density  per  rack. 
And  thanks  to  its  Direct  Connect  Architecture  with  HyperTransport™  technology,  the  AMD  Opteron  processor 
provides  more  performance-per-watt  and  CPU  scalability,  in  short,  huge  performance  in  a  smaller  space. 


Competitor 


AMD  Opteron™  processors  con  increase  server 
rack  density  by  25%  over  the  competition. 


Smarter  Choice1; 


www.amd.com/lessenergy 
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Sun  Pitches  Big  x86  Server 
For  Virtualization  Projects 


Lenovo  Grants  IBM 
ThfnkVantage  License 

Lenovo  Group  Ltd.  has  agreed 
to  allow  IBM  Global  Technology 
Services  to  license  its  Think- 
Vantage  software  for  deployment 
on  non-Lenovo  PCs.  Think- 
Vantage  automates  PC  support 
functions.  The  deal  marks  the 
first  time  the  software  is  avail¬ 
able  for  systems  other  than 
Lenovo’s  ThinkPad  notebooks 
and  ThinkCentre  desktops. 


OpenOffice.org 
Warns  of  Flaws 

The  OpenOfhce.org  open-source 
community  has  issued  a  warning 
that  its  productivity  software 
contains  flaws  that  can  give 
hackers  access  to  full  system 
resources.  The  vulnerabilities 
affect  OpenOfhce.org  Versions 
2.0.x  and  1.1.x.  and  StarOffice 
Office  Suite  Versions  6, 7  and  8, 
according  to  Secunia  AP. 


Toshiba  Signs  Deal 
For  Rambus  Chips 

Toshiba  Corp.  has  agreed  to 
pay  a  contested  licensing  fee  to 
Rambus  Inc.  for  its  synchronous 
dynamic  RAM  and  double  data 
rate  (DDR)  memory  technology. 
Terms  of  the  deal  were  not  dis¬ 
closed.  The  license  agreement  is 
a  victory  for  Rambus  in  its  battle 
to  force  memory  chip  makers  to 
pay  for  the  use  of  technology  in 
mainstream  SDRAM  and  DDR 
memory  chips.  Most  memory- 
chip  makers  have  argued  that 
Rambus  did  not  originally  dis¬ 
close  ownership  of  the  patents. 


Adds  Flaw 

No.  200k  to  Database 

McAfee  Inc.  last  week  added  the 
200,000th  definition  to  its  anti¬ 
virus  database,  and  the  security 
vendor  expects  the  total  number 
of  identified  threats  to  double 
in  two  years.  Following  a  lull  in 
their  efforts,  virus  writers  have 
spent  the  past  few  years  creat¬ 
ing  more  malware  than  ever  be¬ 
fore,  said  Jimmy  Kuo,  &  research 
fellow  at  McAfee’s  Avert  Labs. 

At  the  same  time,  the  number  of 
serious  outbreaks  has  dropped 
dramatically,  he  said. 


Users  not  sure 
if  eight-socket, 
dual-core  servers 
are  needed  yet 


BV  PATRICK  THIBODEAU 

UN  MICROSYSTEMS 
Inc.  this  week  plans 
to  announce  new  x86- 
based  server  products, 
including  one  that  can  support 
up  to  eight  dual-core  chips.  In 
doing  so,  Sun  is  betting  that 
IT  managers  will  increasingly 
move  to  large  systems  as  part 
of  a  consolidation  and  virtual¬ 
ization  strategy. 

Most  business  users  today 
rely  on  two-socket  systems, 
so  moving  to  eight  sockets  is 
a  big  step  up.  Analysts  said 
eight-socket  models  are  a  tiny 
part  of  the  x86  server  market, 
and  not  all  vendors  sell  them. 
IBM  sells  eight-socket  x86 
systems.  However,  Hewlett- 
Packard  Co.  last  year  dropped 
an  eight-socket  system  it  had 
introduced  in  2003. 

The  new  Sun  Fire  x4600 
runs  Advanced  Micro  Design 
Inc.’s  Opteron  chip,  which  can 
scale  from  two  to  eight  sock¬ 
ets.  It’s  “really  a  virtualization 


BY  MARC  L.  SONGINI 

Microsoft  Corp.  today  is 
expected  to  unveil  a  new  li¬ 
censing  scheme  that  uses  a 
per-concurrent-user  pricing 
model  across  its  multiple  lines 
of  Dynamics  ERP  applications. 

The  pricing  schedule, 
dubbed  Business  Ready  Li¬ 
censing,  is  for  the  Microsoft 
Dynamics  AX,  GP,  NAV  and 
SL  applications,  said  Tami  Rel- 
ler,  corporate  vice  president  of 
the  Microsoft  Business  Solu¬ 
tions  marketing  group. 

The  current  model  is  based 
on  several  variables,  includ¬ 
ing  the  number  of  modules  in 
use,  she  said.  The  new  model 
offers  flexibility  for  companies 


platform  that  allows  custom¬ 
ers  to  consolidate  dozens  or 
more  conventional  two-socket 
systems  that  never  get  fully 
utilized,”  said  Andy  Bechtol- 
sheim,  Sun’s  chief  architect 
and  senior  vice  president  for 
network  systems. 

Bob  Pappagianopoulos, 
corporate  director  of  techni¬ 
cal  services  and  operations  at 
Partners  Healthcare  System 
Inc.  in  Boston,  said  he  hasn’t 
needed  to  go  beyond  four  sock¬ 
ets  for  any  of  his  x86-based  ap¬ 
plications.  But  the  health  care 
provider  is  testing  virtualiza¬ 
tion,  and  that  could  lead  to  the 
use  of  larger  servers  to  support 
multiple  applications,  Pappa¬ 
gianopoulos  said. 

“If  we’re  successful  on  put¬ 
ting  many  applications  on  a 
four-way,  then  we  may  look  to 
expand,”  he  said.  “But  I  don’t 
see  us  doing  that  in  the  next 
one  to  two  years.” 

Charles  Orndorff,  vice  presi¬ 
dent  of  infrastructure  services 
at  Crossmark  Holdings  Inc.  in 
Plano,  Texas,  is  a  user  of  HP’s 
discontinued  eight-socket  sys¬ 
tem  who  has  switched  to  buy¬ 
ing  HP’s  four-socket,  dual-core 
systems.  Although  pleased  with 
the  four-socket  performance, 


looking  to  gradually  add  seats, 
Reller  said. 

Andy  Vabulas,  CEO  of 
Norcross,  Ga.-based  systems 
integrator  I.B.I.S.  Inc.  and  a 
Microsoft  Dynamics  customer 
and  partner,  said  he  likes  the 
new  pricing  scheme. 

“It  will  make  it  easier  for  us 
to  sell  and  our  clients  to  buy 
[the  software],”  he  said.  “Any¬ 
time  you  can  simplify  pricing, 
it  is  good.  Global  consistency 
is  easy  to  understand.” 

The  base  price  for  the  Busi¬ 
ness  Ready  offering  starts  at 
$2,250  per  user. 

The  higher-end  Microsoft 
Dynamics  Advanced  Manage¬ 
ment  Edition,  which  offers 


he  said  he  isn’t  ruling  out  the 
need  for  eight  sockets  at  some 
point,  but  he  quickly  added  that 
quad-core  chips  are  coming. 

Sun  expects  that  some 
early  users  will  be  high- 
performance  computing 
sites,  such  as  the  Tokyo  In¬ 
stitute  of  Technology,  which 
bought  655  of  the  x4600  serv¬ 
ers  to  create  a  supercomputer 
that’s  ranked  the  seventh- 
fastest  in  the  world. 

Satoshi  Matsuoka,  head  of 
computing  infrastructures  at 
Tokyo  Tech,  said  the  univer¬ 
sity  wanted  a  system  that’s 
compatible  with  traditional 
supercomputers  —  “very  fat 


more  complex  financial  and 
accounting  applications  along 
with  software  for  manufactur¬ 
ing  and  project  accounting,  is 
priced  at  $3,980  per  concur¬ 
rent  user. 

Typical  ERP  configurations 
will  cost  about  10%  to  15%  less 
than  they  do  under  the  cur¬ 
rent  model  in  companies  with 
fewer  than  15  users,  Reller  said. 

New  Maintenance  Plan 

Microsoft  is  also  rolling  out 
a  new  maintenance  plan  that 
includes  unlimited  training 
resources  for  a  fee  equal  to  16% 
of  the  price  of  the  software 
license.  Existing  maintenance 
fees  are  generally  set  from  10% 
to  20%  of  the  software  licenses. 

The  Business  Ready  Licens- 


nodes,  with  lots  of  CPUs  and 
memory  per  node.”  Each  phys¬ 
ical  server  is  a  node. 

This  week,  Sun  is  also  ex¬ 
pected  to  release  its  Sun  Fire 
x4500  data  server,  which  uses 
a  two-socket  Opteron  chip  and 
comes  with  up  to  24TB  of  stor¬ 
age  in  48  500GB  drives.  Sun 
said  this  product,  which  was 
code-named  Thumper,  isn’t 
a  replacement  for  traditional 
storage  systems  but  will  speed 
up  storage-intensive  applica¬ 
tions  such  as  video  searching 
and  business  intelligence. 

IDC  analyst  Jean  Bozman 
said  that  by  bringing  together 
storage  and  computing  ele¬ 
ments,  Sun  will  be  able  to 
take  out  network  latency 
and  improve  throughput  and 
performance.  “Large  servers 
put  memory  close  to  proces¬ 
sors,”  she  said.  “This  is  similar 
thinking.” » 


ing  plan  will  take  effect  on 
Aug.  1.  The  new  Business 
Ready  Enhancement  mainte¬ 
nance  pricing  schedule  will  be 
fully  effective  by  March  2007. 

Although  he  likes  the  unlim¬ 
ited  training  offer  in  the  main¬ 
tenance  plan,  Nick  Garbidakis, 
chief  technology  officer  at  the 
New  York-based  American 
Bible  Society,  said  he  will  with¬ 
hold  comment  on  the  pricing 
until  he  sees  the  details  and 
breakdown  of  the  cost  involved. 
The  society  uses  Microsoft 
ERP  software. 

Garbidakis  did  note  that 
since  he’s  in  the  midmarket, 
none  of  the  pricing  plans  par¬ 
ticularly  benefit  him,  because 
they  are  generally  designed  for 
small  or  large  companies. » 


New  Sun  Products 

These  systems,  which  run  AMD  Opteron 
dual-core  chips,  will  be  available  this  month: 

Sun  Fire 

Sun  Blade  8000 

x46Q0 

Data  Server 

Modular  Systems 

Can  scale  from  two  to 

Two  sockets,  plus  up 

Chassis  that  can 

eight  sockets  and  fit 
into  a  4U  chassis 

to  24TB  of  storage 

Supports  Solaris 

support  10  four- 
socket  blades 

Supports  Solaris, 

and  its  Zettabyte  File 

Supports  Solaris, 

Windows  and  Linux 

System 

Windows  and  Linux 

Pricing:  S25, 995  for 

Pricing:  Starts  at 

Pricing:  514,600 

four  sockets 

532,995  for  the  12TB 

for  one  blade  and 

configuration 

chassis 

Microsoft  to  Revamp  ERP  Pricing 


T 


BY  GALEN  GRUMAN 

HE  TWIN 
PRESSURES 

of  doing  more  for 
the  business  and 
keeping  IT  costs 
down  are  forc¬ 
ing  many  CIOs  to 
rethink  their  approach  to  one  of  their 
most  critical  responsibilities  and  one  of 
their  largest  costs:  the  enterprise  data 
center.  A  joint  Computerworld/CIO 
survey  of  389  IT  executives  shows  that 
63%  are  seeking  increased  efficiency 
from  their  data  centers,  while  60%  are 
looking  to  bring  in  new  capabilities. 

“CIOs  are  seeing  that  the  econom¬ 
ics  of  yesterday’s  data  center  isn’t 
going  to  work  in  the  future,”  says 
Michelle  Bailey,  research  director  at 
IDC.  “You  can’t  have  more  people, 
more  I/O  and  more  servers  with 


VIRTUALIZATION  ON  THE  RISE 

8  More  than  three  quarters  of 
all  companies  with  500+  em¬ 
ployees  are  deploying  virtual  servers. 

Respondents  currently  using 
server  virtualization  technologies 
report  that  they  expect  45%  of 

new  servers  purchased  next 
year  to  be  virtualized. 

SOURCE::  IOC  2005  SURVEY 


every  new  application,”  she  says. 

New  technologies,  such  as  vir¬ 
tualization  and  automation,  hold 
significant  promise  in  changing  the 
economics  of  the  data  center,  largely 
by  reducing  both  the  labor  and  equip¬ 
ment  needed  to  be  maintained  and 
optimized.  The  next-generation 
data  center,  promoted  by  vendors 
as  “lights  out,”  moves  away  from  the 


maintenance-and-repair  model  to  the 
orchestrate-and-prevent  model.  In  the 
lights-out  data  center,  systems  largely 
manage  themselves  and  a  smaller  core 
of  IT  staff  focuses  on  improving  the 
data  center’s  ability  to  drive  innova¬ 
tion  and  enhance  the  business. 

But  adoption  of  these  next-genera¬ 
tion  technologies  introduces  archi¬ 
tectural  and  integration  challenges. 
The  technologies’  varying  levels  of 
maturity  will  require  a  staged  imple¬ 
mentation  approach  and  demand  that 
CIOs  rethink  their  data  center  staffing 
model.  “It’s  a  lot  to  bite  off,”  says  Galen 
Schreck,  a  senior  analyst  at  Forrester 
Research  Inc. 

Virtualization:  Promises 

One  new  technology  in  particular 
—  virtualization  —  can  help  CIOs 
significantly  improve  operations  and 
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services.  A  related  approach  to  virtu¬ 
alization  is  grid  computing,  in  which 
multiple  servers  are  joined  together  not 
as  a  single  virtual  machine,  but  as  a  co¬ 
ordinated  set  of  computational  engines, 
like  a  yoked  team  of  horses. 

Merrill  Lynch  &  Co.  has  recently 
deployed  a  grid  for  its  derivatives  busi¬ 
ness,  reducing  the  number  of  servers 
needed  to  handle  the  same  computa¬ 
tion  load.  “If  there’s  excess  capacity  in 
the  grid,  you  can  provision  it  in  min¬ 
utes,”  says  John  Cislo,  director  of 
client  infrastructure  solutions.  It 
makes  sense  to  consider  a  grid  rather 
than  virtualization  when  your  compu¬ 
tations  need  to  use  full  server  capacity 
(not  share  it  with  others)  and  handle 
lots  of  floating-point  calculations, 
which  are  common  in  engineering  and 
financial  analyses,  he  says. 

Deploying  a  grid  raises  the  same 
political  issues  that  virtualization 
raises,  notes  Cislo,  because  it,  too,  is 
a  shared  service.  And  grid  computing 
comes  with  other  issues.  One  is  the 
need  for  a  more  homogeneous  server 
environment,  which  can  be  hard  to 
maintain  as  vendors  change  their 
hardware  over  time.  Another  is  the 
need  to  deal  with  small,  less  estab¬ 
lished  vendors,  since  the  commercial 
versions  of  the  technology  are  still 
new.  Third,  setting  up  a  grid  is  expen¬ 
sive,  so  it  requires  that  you  convince 
management  that  the  investment  will 
pay  off  as  more  business  units  take 
advantage  of  the  system,  says  Brad 
Kurtzman,  director  of  equity-linked 
products,  the  first  business  group  at 
Merrill  Lynch  to  use  grid  computing. 

Automation:  Promises 

Automation  is  another  area  where  new 
technology  can  help  make  the  data 
center  more  efficient.  Imagine  that 
each  time  an  employee  is  hired,  is  pro¬ 
moted  or  leaves,  all  application  and 
network  access  systems  are  updated 
to  reflect  changes  in  permissions  or 
roles.  Or  that  as  storage  is  added  to 
the  data  center,  application  and  file 
servers,  disaster  recovery  systems  and 
storage  management  policies  adjust  to 
use  the  new  storage  capacity.  Or  that 
as  application  servers  are  added,  they 
could  simply  be  attached  to  the  net¬ 
work,  and  the  operating  system,  ap¬ 
plications  and  network  connections 
would  be  installed  automatically. 


GETTING  BIGGER 

During  the  next  three  years, 
my  company  plans  to: 


32%  \ 

/  Keep  data  \ 

47%  Icenter  facilities  \ 

Expand  I  at  the  same  | 

|  datacenter  .T  eve' 

I  facilities  21% 

Consolidate 
or  reduce 
data  center 
facilities 

BASE:  .389  IT  executives 

SOURCE;  EXCLUSIVE,  COMPUTERWORLD/CIQ  SURVEY. 
CONDUCTED  MAY  2006 

COSTS  AND  CAPABILITIES 

What  are  the  three  main  rea¬ 
sons  for  making  changes  to  your 
company’s  data  center  facilities? 

To  reduce  operational  costs 
through  efficiency 
and  automation 

To  bring  in  new  capabilities  or 
enlarge  its  mission  for  roughly 
the  same  overall  costs 

To  consolidate  multiple  data  centers 
for  economies  of  scale  and 
centralization 

BASE:  389  IT  executives;  respondents  could 
choose  their  top  three 

source:.  Exclusive  computer w^ld/cio  survey- 
conducted  May  2006 


Today,  each  system  must  be  updated 
by  an  IT  staffer,  even  if  you  have  a 
centralized  management  console  ap¬ 
plication  to  simplify  the  effort. 

However,  automation  technology  is 
even  less  mature  than  virtualization, 
reports  Data  Dimension’s  Dominick. 
Although  many  automation  tools  are 
available,  they  tend  to  focus  on  spe¬ 
cific  subsystems,  requiring  IT  staffers 
to  manage  their  interactions  and  often 
develop  their  own  tools  to  integrate 
them,  says  Forrester’s  Schreck.  “You 
need  to  get  the  integration  before  you 
can  provision,”  he  says.  The  result: 
“Maybe  about  15%  of  North  American 
firms  have  started  to  make  this  transi¬ 
tion,”  Schreck  notes,  referring  to  an 
unpublished  Forrester  study.  Accord¬ 
ing  to  the  Computerworld/CIO  survey, 
40%  or  more  of  respondents  identified 
immaturity  in  each  of  four  automa¬ 


tion-related  technologies  as  barriers 
to  achieving  a  lights-out  data  center: 
policy-based,  self-configuring  systems 
for  automated  system  adjustments; 
management  and  monitoring  tools  for 
security  and  compliance  needs;  stan¬ 
dardized  interfaces  so  management 
tools  can  work  together;  and  support 
desk  and  system  management  tools 
that  can  work  together  automatically. 

As  automation  products  improve, 
this  should  change.  “Today,  they’re 
mostly  point  tools,  but  I  see  holistic 
umbrella  tools  emerging,”  IDC’s  Bailey 
says.  “We  see  the  ramp-up  in  the  next 
18  to  24  months.”  In  the  meantime, 
enterprises  should  standardize  their 
IT  processes  using  techniques  such 
as  IT  Infrastructure  Library  and  Six 
Sigma  to  ensure  that  the  data  center 
has  the  right  processes  to  get  ready 
for  automation,  Schreck  says. 

Automation:  Challenges 

As  with  virtualization,  automation 
requires  a  more  skilled,  expensive 
IT  staff.  Troubleshooting  becomes 
exponentially  more  difficult  when 
the  server  that  has  failed  is  actually 
spread  across  several  physical  serv¬ 
ers.  And  optimizing  or  just  fixing 
problems  in  automated  systems  that 
interact  with  other  automatic  sys¬ 
tems  becomes  quite  difficult  because 
so  many  decisions  and  assumptions 
are  now  hidden  inside  the  software. 

“The  skill  sets  change  dramatically,” 
says  Coldwater’s  Carper.  He’s  had 
to  change  his  IT  staff  mix  by  hiring 
more-skilled,  process-oriented  staffers 
to  focus  on  core  systems  management 
and  automation  so  that  errors  and 
inefficiencies  don’t  ripple  throughout 
the  data  center.  He  also  has  automated 
provisioning  of  new  hardware  and 
software  wherever  possible,  so  the 
IT  staff  doesn’t  spend  nearly  as  much 
time  loading  software  onto  machines. 
For  example,  if  a  laptop  needed  to  be 
replaced,  Coldwater’s  IT  staff  would 
just  drop  off  a  new  system  to  the  user. 
All  the  user  data,  as  well  as  applications 
and  network  access  permissions,  would 
be  automatically  restored  over  the  net¬ 
work  in  an  hour  or  two.  That’s  possible 
because  Carper  invested  in  automated 
backup  and  provisioning  systems.  Af¬ 
ter  revamping  Coldwater’s  data  center 
over  the  past  two  years,  “we  have  fewer, 

CONTINUED  ON  PASE  8 


6  Next-GenIT  |  A  Series  From  the  Editors  of  Computerworld  and  CIO 


July  2006 


Introducing  data  centers  on  demand 

New  architecture  supports  power  densities  of  today...  and  tomorrow 


Now  you  can  quickly  deploy  a 
standard-  or  high-density  site  of  any  size 
with  scalable,  top-tier  availability. 


Part 

Number 

Usable 

IT  Racks 

Average 
kW  per  Rack 

Price  Price  to  lease 

to  buy  (36  installments) 

ISXCR1SY16K16P5 

1 

up  to  5kW 

514,999*  5499** 

ISXT240MD6R 

6 

up  to  5kW 

*149,999*  *4,999** 

ISXT240MD11R 

11 

up  to  5kW 

*249,999*  *7,999** 

ISXT28BMD40R 

40 

up  to  5kW 

*699,999*  *21,999** 

ISXT2800MD100R 

100 

up  to  5kW 

*1,649,999*  *50,999** 

High  Density  Configuration  (shown  above! 

ISXT2B0HD8R 

8 

up  to  lOkW 

*399,999*  *12,999** 

High  density  upgrades  start  at  $1 0,999 
On-site  power  generation  options  start  at  $29,999 


Infrastructure 

DATA  CENTERS  ON  DEMAND 


Highly  available  and  manageable, 
quick-to-mstall.  scalable  architecture 
that  easily  supports  both  standard- 
and  high-density  applications. 

-  Up  to  20kW  a  rack  for  any 
blade  server  application 

-  Unlimited  racks 

-  Ships  in  5  days*** 

-  Installs  in  I  day*** 

-  Optional  on-site  power 
generation 

-  Raised  floor  not  required 


APC  solutions  that  carry 
the  'Blade-Ready'  Logo 
are  designed  to  handle  the 
demanding  network-critical 
physical  infrastructure 
requirements  of  high-density 
blade  server  applications 


Chamber  Doors 

Access  to  hot  aisle, 
locks  for  security 


All  multi-rack  configurations  feature: 

f/  N+ 1  power  and  cooling 

Secure,  self-contained  environment 
V  Peak  capacity  of  20kW  per  rack 
Enhanced  service  package 
f/  Integrated  management  software 


InfraStruXure™  Manager 


dears  in  not  air,  prevents  mixing  wnn  room  air 


BEST  Of  iNTtROP 


(«f 

BLADE 

READY 


Vendor  neutral  guaranteed 
compatibility 


Order  your  solution  today.  Call  888-289-APCC  x3643. 

- .  —  ' 

Visit  today  and  receive  FREE  APC  White  Papers 
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Visit  us  online  and  download  APC  White  Papers. 
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InfraStruXure™  can  be  purchased  as 
a  modular,  or  mobile  system 


Don't  see  the  configuration  you  need? 

Try  APC's  online  InfraStruXure™  BuildOut  Tool  today  and  build  your  own  solution. 

Go  to  http://promo.apc.com  and  enter  key  code  m377x  Call  888-289-APCC  x3643 


lnfraStruXure,M  BuildOut  Tool 


*  Prices  do  not  include  IT  equipment  and  are  subject  to  change  "  Indicative  rates  are  subject  to  market  conditions.  ***  Install  and  delivery  times  may  vary. 
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CIOs  Feel  the  Heat 

The  next-generation  data  center  shares  two  prob¬ 
lems  with  its  elders:  it’s  hungry,  and  it  runs  hot. 

From  the  mainframe  on,  data  center  managers 
have  struggled  with  power  and  heat.  Huge  quantities 
of  equipment  require  huge  amounts  of  power.  And 
computers  generate  significant  heat,  which  increases 
as  equipment  gets  smaller  and  denser.  And  that 
means  more  air  conditioning  and  even  more  power. 

Whether  an  enterprise  is  trying  to  free  up  real 
estate  or  trying  to  cram  more  equipment  into  a  grow¬ 
ing  company’s  existing  data  center,  the  result  is  the 
same:  more  power  needed,  more  heat  generated. 

There  aren’t  many  easy  answers  to  these  challenges. 
You  can  replace  older  equipment  with  higher-capacity, 
higher-performance  equipment  to  at  least  stem  the 
tide  of  power  usage  and  heat  emission.  You  can  place 
equipment  so  that  the  devices  that  emit  lots  of  heat 
have  greater  airflow  or  zoned  air  conditioning  around 
them.  Or  you  could  alternate  high-heat  devices  with 
low-heat  ones,  a  strategy  called  “hot  aisle/cold  aisle.” 

New  30-plus  blade  servers  generate  so  much  heat 
that  they  are  especially  difficult  to  cool,  says  John  Web¬ 
ster,  senior  analyst  at  consultancy  Data  Mobility  Group. 


Pegasus  Solutions  CIO  Mike  Kistner  had  to  use  the  hot 
aisle/cold  aisle  approach  with  his  blade  servers.  Where 
possible,  he’s  shifting  to  compute  appliances,  a  type 
of  multiprocessor  device  from  Azul  Systems  Inc.  that 
emits  much  less  heat  and  takes  less  power.  “We  save 
thousands  of  dollars  a  month  in  electricity,”  Kistner 
says.  But  the  compute  appliance  is  designed  for  Java 
applications,  so  blade  servers  are  still  needed  for  the 
majority  of  Pegasus’  enterprise  software. 

Corrections  Corporation  of  America  CIO  Brad 
Wood  built  a  new  data  center  three  years  ago,  with 
one  goal  being  to  avoid  heat  problems  through  physi¬ 
cal  design.  “But  we  still  have  hot  spots,”  he  says.  “The 
new  boxes  are  killers  for  heat.” 

In  a  return  to  the  mainframe  past,  data  centers  may 
need  to  use  water  cooling  for  the  new  generations  of 
dense,  rack-mounted  servers  and  storage  systems, 
says  Randy  Mott,  CIO  of  data  center  equipment  ven¬ 
dor  Hewlett-Packard  Co.  But  that  presents  another 
problem:  “Lots  of  people  don’t  have  the  plumbing  in 
their  data  center,”  says  IDC  analyst  Michelle  Bailey. 
“And  they  are  often  concerned  with  leaks  destroying 
the  equipment.”  So  CIOs  and  CTOs  will  have  to  keep 
their  cool  as  best  they  can. 

-  GALEN  GRUMAN 


CONTINUED  FROM  PA6E  6 

more  highly  talented  people,”  he  says. 
But  the  next-generation  data  center’s 
demand  for  a  more  highly  skilled  IT 
workforce  presents  a  staffing  risk  for 
CIOs  moving  in  that  direction. 

Consolidation 

The  third  leg  of  a  next-generation  data 
center  technology  strategy  is  consoli¬ 
dation.  Multiple  data  centers  can  elim¬ 
inate  redundancies  in  equipment,  staff 
and  telecommunications  technology. 
Consolidation  within  a  single  data 
center  —  reducing  the  range  of  equip¬ 
ment  used  and  using  higher-capacity 
equipment  —  achieves  similar  results 
by  simplifying  technology  deploy¬ 
ments  and  process  changes. 

Incremental  technology  advances, 
such  as  the  use  of  blade  servers,  dens¬ 
er  storage  and  multiprocessor  CPUs, 
have  made  it  easier  to  consolidate  data 
centers  by  increasing  capacity  in  the 
same  or  less  physical  space.  “We  get 
economies  of  scale,  with  no  additional 
management  needed,”  says  Mike  Kist¬ 
ner,  CIO  of  Pegasus  Solutions  Inc.,  a 
payments  and  reservations  service 
provider  for  hotels. 

The  maturation  of  remote  monitor¬ 


ing  and  management 
tools  lets  central  IT  staff 
manage  satellite  offices 
confidently,  notes  Data 
Dimension’s  Dominick. 

“But  be  careful  not  to  get 
too  much  physical  dis¬ 
tance  between  the  data 
center  and  the  remote 
staff,”  he  warns.  For 
example,  if  a  remote  of¬ 
fice  has  its  own  disaster 
recovery  application 
running  on  a  local  server, 
you’ll  need  to  dispatch 
someone  to  fix  it  if  it 
fails.  Remote  tools  can  handle  stan¬ 
dard  processes  and  technologies,  but 
specialty  equipment  and  software  will 
usually  require  someone  at  the  scene. 

“It’s  expensive  to  consolidate,  so 
you  need  executive  buy-in,”  CCA’s 
Wood  cautions. 

Lights  Out:  The  Vision 

Although  vendors  like  to  use  the 
phrase  “lights  out”  to  describe  the 
vision  of  future  data  centers,  a  fully 
automated,  self-adjusting  data  center 
with  no  people  (a  la  the  HAL  9000  of 
2001:  A  Space  Odyssey )  remains  more 


fiction  than  science. 

What  will  happen  is 
that  data  centers  will 
become  increasingly 
automated  and  self¬ 
managing  as  virtualiza¬ 
tion,  automation  and 
monitoring  technologies 
mature,  letting  comput¬ 
ers  respond  to  typical 
situations  based  on 
human-created  scenar¬ 
ios.  But  people  will  still 
be  needed  to  handle  the 
unexpected  and  develop 
the  improved  processes 
and  business  applications  that  will 
keep  the  enterprise  moving  forward. 

“There’s  no  standard  framework” 
for  a  next-generation  data  center,  says 
Dominick.  So  the  CIO  still  needs  to 
figure  out  how  to  implement  still- 
evolving  technologies,  rework  and 
streamline  the  IT  processes,  and  get 
the  right  skill  mix  in  the  organization 
to  get  closer  to  that  lights-out  vision.  ♦ 


Gruman  is  principal  of  The  Zango 
Group  in  San  Francisco  and  a  regular 
contributor  to  CIO  magazine.  Contact 
him  at  ggruman@zangogroup.com. 


ness,  skill  sets  in  the 
data  center  will  also 
evolve  IDC  believes 


required,  while  business 
analysts  will  play  an 
increasingly  important 
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ADVERTISING  SUPPLEMENT 


At  NATO,  Thought  Leadership,  Supported  by 
Enterprise  Architecture,  Brings  SOE  to  Life 

Capgemini  uses  the  concept  of  the  service-oriented  enterprise  to 
connect  SOA  technology  with  desired  business  change  -  not  on  a 
theoretical  level  but  in  terms  of  specific,  achievable  action.  But  rather 
than  sell  this  as  an  abstract  proposition  to  customers,  the  firm  prefers  to 
tackle  business  issues  head  on. 

“In  order  to  achieve  real  collaboration,  it  is  essential  that  people, 
organizations  and  services  work  together  seamlessly,”  says  Olaf 
Kruidhof,  Senior  Systems  Architect,  NATO  C3  Agency,  one  of  Capgemini’s 
customers. 

When  Capgemini  brought  its  SOE  vision  to  NATO,  that  organization’s 
requirement  was  to  boost  interoperability.  In  order  to  meet  and  manage 
these  requirements  the  organization  adopted  a  services-oriented 
approach  that  was  developed  using  NATO’s  own  methodologies,  along 
with  best  practice  from  Capgemini  and  other  sources  in  industry 
and  academia.  All  types  of  services  are  now  included,  ranging  from 
operational  and  business  information,  to  user/IS  and  technical 
infrastructure. 


allow  those  close. to  customers  and 
markets  to  innovate. 

•  Innovate,  Capture  Value,  Then 
Integrate:  Don’t  wait  for  end-to-end 
service  enablement;  do  business  now 
and  improve  infrastructure  gradually. 

•  Practice  Safe  SOA:  With  service- 
oriented  architecture  (SOA),  establish 
standards  for  security  and  operational 
quality,  while  still  empowering  innova¬ 
tion  at  the  edges. 

•Dump  HTML:  Use  the  web  as  a  gate¬ 
way  to  allow  customers  to  find  you. 
Then  bring  them  into  a  better  user 
interface  to  transact  business. 

•  Computers  Serve  Humans:  Opti¬ 
mize  in  every  way  possible  to  increase 
human  efficiency. 

Built-in  Capabilities 

Success  in  applying  these  SOE  lessons 
comes  in  part  from  building  solu¬ 
tions  on  the  right  foundation.  Just  as 
SOA  represents  a  new  generation  of 
software,  Intel  brings  a  whole  crop 
of  next-generation  computing  plat¬ 
forms  to  market  that  can  amplify  its 
advantages.  This  includes  new  mobile 
clients  based  on  Intel® 

Centrino®  Duo  mobile 
technology.  Notebooks 
and  tablets  based  on 
this  highly  capable 
wireless  computing 
platform  can  “empow¬ 
er  the  edge,”  where 
employees  interact 
with  customers. 

Similarly,  business 
desktop  PCs  with  new 
Intel®  vPro™  tech¬ 
nology  can  provide 
lower  TCO  through 
built-in  manageability  and  greater 
protection  for  business-critical  data. 
Industry-standard  servers  based  on  the 
next-generation  64-bit  Intel®  Xeon® 
and  Itanium®  2  processors  provide  the 
same  high  performance  and  scalability 
as  client  platforms  from  Intel — and 
they  can  scale  dynamically. 

“New  Intel®  platforms  deploying 
with  enhanced  manageability  and 
hardware -based  virtualization  features 


provide  the  ideal  foundation  for  a 
Service  Oriented  Infrastructure  on 
which  to  deploy  SOA  solutions.”says 
Chris  Thomas,  Chief  Strategist,  Intel 
Corporation. 

Today,  with  industry  analysts  pre¬ 
dicting  service-oriented  spending  of 
more  than  $33  billion  annually  by 
2010,  it’s  clear 
that  global  or¬ 
ganizations  are 
focusing  on  new 
business  strate¬ 
gies.  The  focus 
on  SOE  that  Intel 
and  Capgemini 
share  is  about 
building  those 
new  business 
strategies  wisely, 
with  an  infra¬ 
structure  that 
doesn’t  just  fix 
the  past  but  instead  enables  the  future. 

As  Forrester  puts  it,  “Capgemini 
uses  the  concept  of  the  service-orient¬ 
ed  enterprise  (SOE)  to  stress  the  im¬ 
portance  of  achieving  the  desired  busi¬ 
ness  goals  of  business  change. 

But  rather  than  sell  this  as  a 
proposition  to  customers,  the 
firm  prefers  to  tackle  business 
issues  and  uses  SOE  and  SOA 
frameworks  and  approaches 


in  meeting  those  issues  as  a  matter  of 
course.”  * 

“To  become  faster  and  more  agile 
at  responding  proactively  to  change 
drivers,  a  business  needs  to  have 
choices  in  how  it  supports  the  busi¬ 
ness  change,”  says  Capgemini’s  CTO 
Andy  Mulholland.  “This  could  be  by 
outsourcing  the  processes,  construct¬ 
ing  a  new  capability  internally,  buying 
or  building  an  application  or  any  com¬ 
bination  of  these.” 

Claim  the  Future 

Intel  and  Capgemini  challenge  busi¬ 
ness  leaders  and  IT  organizations  to 
move  beyond  infrastructure  concerns 
toward  becoming  a  service-oriented 
enterprise.  Learn  how  to  take  the  next 
steps  in  this  journey  by  visiting  Next 
Generation  IT  Insights  at  www.next- 
generationinsights.com  for  valuable 
business  and  technical  insights,  real- 
world  case  studies,  webcasts  and  more. 


*Forrester:  “Identifying  Service  Providers'  SOA 
Value"  by  Andrew  Parker,  John  Rymer  and  Caro¬ 
line  Hoekendijk,  February  2006 
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“New  Intel®  platforms  deliver 
enhanced  manageability 
and  hardware-based 
virtualization  features  that 
provide  an  ideal  foundation 
for  a  Service  Oriented 
Infrastructure  on  which  to 
deploy  SOA  solutions.” 
-Chris  S.  Thomas, 

Chief  Strategist,  Intel 
Corporation 
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Research 


The  next-generation  data 
center  is  clearly  a  system  in 
flux.  In  a  joint  Computerworld/CIO 
survey,  close  to  half  of  the  respon¬ 
dents  reported  that  their  compa¬ 
nies  will  expand  their  data  facilities 
within  the  next  three  years,  and 
almost  one  quarter  said  they  are 
planning  to  reduce  or  consolidate 
their  facilities.  Most  are  seeking 
to  cut  costs  (63°/o),  but  an  almost 
equal  number  expect  more:  They 
want  their  data  center  overhauls 
to  bring  new  capabilities  without 
increasing  costs  (60°/o). 

IT  managers  also  want  things 
simpler.  When  asked  about  con¬ 


solidation  techniques,  respon¬ 
dents  said  they  expect  server 
virtualization  and  standardized 
hardware  to  make  their  data  cen¬ 
ters  simpler  to  manage  (66°/o) 
and  more  energy-efficient  (48%). 

Yet  there  are  worries,  too:  44% 
said  they  are  concerned  that  con¬ 
solidation  won’t  reduce  costs  but 
will  shift  expenses  to  other  areas. 
And  the  same  number  of  respon¬ 
dents  worry  that  the  skill  set  need¬ 
ed  to  manage  consolidated  data 
centers  will  actually  expand.  ♦ 

‘Respondents  could  choose  all  that  apply. 


Expert  on  Staff 

Which  of  the  following  state¬ 
ments  describe  your  current  data 
center  environment?* 


IT  staff  is  composed  of 

specific  experts  for  most  areas.  52% 


IT  staff  is  composed  mainly 
of  generalists  who  can  handle 
multiple  operations. 

46% 

Data  center  relies  heavily  on 
homogeneous  environments 
to  reduce  complexity. 

41% 

Data  center  is  largely  automated 
(lights-out);  IT  staff  handles 
exceptions  vs.  routine 
maintenance. 

34% 

Data  center  relies  heavily  on  hetero¬ 
geneous  environments  to  deliver 
best-of-breed  functionality.  24% 

Data  center  is  broadly  distributed 
and/or  managed  significantly  by 
remote  staff  or  providers. 

18% 

Data  center  relies  extensively  on 
virtualization  to  reduce  use  of 
proprietary  hardware. 

15% 

Data  center  is  outsourced  to 
one  or  more  third-party  hosts. 

15% 

Mainframe,  Be  Gone 

Mainframes  once  dominated  data 
centers,  but  their  importance  has 
decreased  in  recent  years.  Which 
of  the  following  most  closely  de¬ 
scribes  the  outlook  for  your  main¬ 
frame  environment  over  the  next 
three  years? 


■  We  will  completely  eliminate 
our  mainframe  environment. 


■  The  number  of  MIPS 
we  have  will  remain  steady. 

The  number  of  MIPS  we 
have  installed  will  decline  from 
current  levels. 

■  We  will  grow  our  MIPS 
primarily  due  to  new  applications. 


IT  Takes  the  Lead 

Which  groups  are  involved  in 
the  space  planning  for  your 
company’s  data  center?* 


it  72% 


A  facilities  committee/ 

physical  plant  committee  36% 

Executive  board  17o/o 

All  of  the  above  28% 


Other  3% 

I 


Simplicity,  Please 

Many  enterprises  are  told 
to  consolidate  their  data  cen¬ 
ters  to  reduce  their  scale  and 
operational  costs  using  tech¬ 
niques  such  as  virtualization 
and  standardized  hardware. 

If  you  were  to  consolidate  your 
data  center,  what  outcomes 
would  you  expect?* 

The  data  center  will 
3et  simpler  to  manage.  66% 


The  data  center  will  become 

more  enerqy-efficient.  48% 


The  data  center  will  need 

less  hardware.  47% 


The  data  center  will  require 

fewer  staff  resources.  47o/o 


The  data  center  will  get  smaller.  24% 


Shifting  Burdens 

If  you  were  to  consolidate  your 
data  center,  which  issues  would 
be  of  greatest  concern?* 

The  skill  set  needed  to  manage 
the  data  center  will  increase.  44% 

The  overall  data  center  cost  won’t 
change  significantly  but  will  shift 
from  one  area  to  another.  44% 

The  consequences  of  system 
failure  increase  unacceptably.  42% 

Data  center  productivity  drops.  20% 
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DON  TENNANT 


Beyond  a  Pulse 


WATCHING  Steven  Tyler  perform 

at  the  Boston  Pops  Fourth  of  July 
celebration  on  the  banks  of  the 
Charles  River  last  week  had  to  give 
a  lot  of  us  fiftysomethings  a  boost. 
Say  what  you  will  about  the  58-year-old  lead  singer  of 
the  rock  band  Aerosmith,  but  you  certainly  have  to 
admit  one  thing:  The  guy’s  no  geezer. 

In  disturbing  contrast, 


I’ve  seen  a  lot  of  baby 
boomer  IT  professionals 
who  appear  to  be  slipping 
quietly  into  geezer  mode. 

They  look  tired  and  act 
tired,  and  it’s  as  if  they’ve 
acquiesced  to  being 
sidelined  by  Generation 
X  or  Y  or  Z  or  whatever 
generation  is  getting  the 
buzz  now.  That’s  unfor¬ 
tunate,  because  the  skills 
that  these  IT  profession¬ 
als  have  honed  over  the 
course  of  a  quarter  century  or  so  are 
too  critical  to  the  health  of  the  indus¬ 
try  to  be  allowed  to  atrophy. 

That’s  one  of  the  conclusions  I 
drew  from  the  findings  of  our  inau¬ 
gural  Vital  Signs  study  in  this  week’s 
issue  (page  35).  This  quarterly  online 
survey  is  a  means  of  taking  the  pulse 
of  IT  professionals  so  we  can  better 
monitor  the  health  of  the  industry 
that  yields  our  livelihoods.  And  the 
results  of  this  first  one  are  telling. 

The  theme  that  resonated  through 
the  study  is  that  good  IT  talent  is 
getting  harder  to  find  and  harder 
to  keep.  When  asked  to  rate  their 
ability  to  recruit  key  IT  personnel 
compared  with  the  same  time  last 
year,  41%  of  the  respondents  said  it’s 
more  difficult,  and  only  10%  said  it’s 
easier.  One  of  the  respondents  said 
.  posting  on  Monster.com  that  drew 
500  responses  within  two  days  four 
years  ago  more  recently  drew  only 
40  responses  after  a  week.  Another 
lamented  that  he  was  getting  a  lot 
mor  qualified  candidates  coming  in 
for  interviews  a  year  ago  than  he’s 
getting  now. 

Clearly,  these  findings  won’t  sit 


DON  TENNANT  is  editor 
in  chief  of  Computermrld. 
Contact  him  at  don.tennanti 
coiriptiterworld.com. 


well  with  a  lot  of  un¬ 
employed  or  underem¬ 
ployed  IT  workers  who 
have  been  unsuccessful 
in  matching  their  skills 
with  the  needs  of  em¬ 
ployers  that  claim  there’s 
a  scarcity  of  good  IT 
talent. 

We’ve  already  gotten 
an  earful  from  read¬ 
ers  who  responded  to 
Management  editor 
Kathleen  Melymuka’s 
interview  last  week  with 
the  author  of  a  book  that  warns  of 
a  coming  IT  talent  crunch  (“Work¬ 
force  Crisis,”  July  3,  2006).  “Kath¬ 
leen  Melymuka  has  been  drinking 
at  the  Kool-Aid  trough  of  the  tech 
executives  and  their  lobbyists  again,” 
wrote  one.  “Are  you  kidding  me?” 
asked  another.  “The  only  ‘short¬ 
age’  of  computer  professionals  [is] 


for  the  jobs  that  don’t  pay  enough 
to  raise  a  family  on.”  A  third  reader 
was  more  succinct  in  his  assessment 
of  the  article:  “Total  crap.” 

In  any  case,  I  found  it  interesting 
that  the  book’s  author  referred  to  old¬ 
er  workers  as  an  “untapped  resource” 
and  noted  that  those  over  55  are  the 
fastest-growing  segment  of  the  work¬ 
force.  “The  average  employer  will 
have  to  rely  more  on  workers  over  55,” 
he  predicted. 

Whether  or  not  you  buy  the  fore¬ 
casts  of  an  increasingly  tight  IT  labor 
market,  a  positive  dimension  in  all 
this  is  that  age  may  no  longer  be  the 
inhibitor  it  has  traditionally  been 
thought  to  be.  Just  last  week,  Com- 
puterworld.com  posted  a  story  from 
Careerjournal  about  the  growing 
number  of  online  job  sites  targeting 
workers  age  55  and  older. 

So  to  my  fellow  fiftysomethings 
who  haven’t  gotten  the  message,  I 
say  knock  off  the  geezer  routine.  No 
one’s  saying  you  should  make  a 
microphone  stand  adorned  with  long, 
colorful  scarves  a  professional  staple. 
But  when  it’s  encore  time,  give  the 
crowd  all  you’ve  got.  This  industry 
needs  and  deserves  more  than  just 
a  pulse.  * 


MICHAEL  H.  HUGOS 

The  Value  of 
IT  Agility 

IN  MY  previous  column 
(“The  Robust  80%  Solu¬ 
tion,”  June  5),  I  described 
a  situation  where  a  national 

restaurant  chain  wanted  to  increase 
sales  and  reduce  costs  by  better 
matching  its  food  inventory  with  lo¬ 
cal  sales  demand.  I  asked  readers  how 
they  would  use  IT  agility  to  enable 
the  company  to  accomplish  that  goal. 

Some  readers  were  dubious  about 
the  wisdom  of  using  agile  IT  methods 
to  tackle  such  a  complex  business 
problem.  With  millions  of  dollars  of 
inventory  at  stake  and  hundreds  of 
variables  and  business  rules  to  take 
into  account,  is  it  wise  or  responsible 
(even  if  it  is  possible)  to  act  quickly 
and  deliver  only  a  partial  solution? 

I  keep  talking  about  IT  agility 
because  it  works.  There  is  real  busi¬ 
ness  value  in  quickly 
getting  a  system  into 
production  that  works 
but  covers  only  80% 
of  what  is  needed. 

Here’s  what  the 
team  I  assembled  did 
for  the  client. 

We  used  joint  ap¬ 
plication  design  to 
pool  ideas  from  busi¬ 
ness  and  technical 
people  and  agree 
on  the  functionality 
needed  in  the  80% 
system.  Then  we 
used  process  map¬ 
ping  to  draw  out  ex¬ 
isting  workflows  and 
design  more  efficient 
business  processes. 

Based  on  the  process  maps,  we 
used  data  modeling  to  define  the  logi¬ 
cal  data  model  for  the  system  data¬ 
base.  Once  we  knew  the  new  business 
processes  and  the  data  model,  we 
where  able  to  create  a  prototype  of 
the  user  interface  and  the  technical 
architecture  for  the  system. 

Inventory  planners  who  would 
use  the  new  system  reviewed  and 
tweaked  the  user  interface  design. 
Company  IT  people  reviewed  and 
tweaked  the  technical  architecture  so 
it  conformed  to  company  standards. 

Then  we  applied  object-oriented 
design  and  programming  to  configure 
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tion.  In  the  past,  e-mail  was  how 
information  about  a  meeting  or  the 
company  picnic  was  distributed.  But 
today,  e-mail  is  the  way  all  employees 
transact  real  business,”  says  Randolph 
Kahn,  founder  of  Kahn  Consulting  Inc. 
in  Highland  Park,  Ill. 

But  mixed  with  all  of  that  critical 
data  are  volumes  of  junk  mail  and 
worse:  spam,  viruses,  personal  notes 
and  potentially  offensive  content. 
Along  with  cuts  in  productivity,  there 
are  the  risks  of  corruption,  deletion  or 
theft  of  corporate  e-mails  containing 
valuable  business  data,  as  well  as  the 
accidental  leakage  of  embarrassing  or 
legally  damaging  content.  E-mail  can 
also  put  a  company  in  jeopardy  of  law¬ 
suits  or  fines  for  not  complying  with 
government  and  industry  regulations. 

According  to  IT  managers  and  in¬ 
dustry  experts,  there  are  three  key 
technologies  that  few  organizations 
can  be  without:  antispam  and  antivirus 
defenses  for  screening  incoming  mail; 
outbound  filtering  and  encryption  to 
evaluate  and  protect  outbound  content; 
and  archival  software  to  ensure  that 
e-mail  containing  intellectual  property 
or  addressing  topics  covered  by  gov¬ 
ernment  or  industry  regulations  are 
retained  in  case  of  future  need. 


1  Inbound  Defenses 

Organizations  need  inbound 
e-mail  filtering  software 
to  catch  spam,  viruses  and 
other  junk  mail  before  they 
clog  or  damage  servers  and 
desktops.  Spam  and  virus 
protection  usually  starts  at 
the  network  perimeter,  either  provided 
by  an  outsourced  service  provider  or 
installed  at  the  organization’s  Internet 
gateway.  It’s  also  a  good  idea  to  have 
antivirus  software  on  e-mail  servers 
and  desktops,  to  guard  against  bugs  on 
floppy  disks,  CDs  and  USB  drives. 

The  12,500  e-mail  users  at  Cedars- 
Sinai  are  protected  by  IronPort  Sys¬ 
tems  Inc.’s  e-mail  security  appliance 
installed  on  the  hospital’s  e-mail 
gateway.  The  IronPort  device  has  its 
own  virus  and  spam  filters,  as  well  as 
Sophos  PLC’s  Anti-Virus  and  Symantec 
Corp.’s  Brightmail  AntiSpam  software. 

Because  spammers  have  learned  to 
evade  traditional  content-based  spam 
filters,  products  like  Brightmail  com¬ 
bine  multiple  technologies,  including 
heuristic  analysis  of  the  content,  filters 
to  detect  URL  masking,  and  reputa¬ 
tion-based  filtering  of  mail  from  suspect 
servers.  IronPort  also  uses  a  reputation 
service  to  catch  spam  and  viruses. 

“If  a  piece  of  spam  comes  in  from  an 


Resolving  the 
Archiving  Dilemma 


FOR  MANY  ORGANIZATIONS,  decid¬ 
ing  what  types  of  e-mail  to  save  and 
for  how  long  are  the  chief  challeng¬ 
es  in  implementing  archiving.  Even 
laws  that  mandate  e-mail  retention 
are  often  not  clear  on  what  needs  to 
be  saved  and  what  does  not. 

“Archiving  has  been  very  confus¬ 
ing,  because  there  are  different 
regulations  from  different  bodies 
-  federal  and  industry-specific,” 
explains  Sara  Radicati, 
president  and  CEO  of 
The  Radicati  Group. 

Because  of  that  confu¬ 
sion,  many  IT  depart¬ 
ments  have  adopted 
an  “archive  everything” 
approach. 

Cedars-Sinai  Medical 
Center  has  opted  to  ar¬ 
chive  all  e-mail  and  at¬ 
tachments,  at  least  until 
it  can  decide  on  some 
specific  policies  for  retention. 

“We’re  still  examining  what  we 
want  to  do,”  explains  systems 
manager  Jerry  Hook.  But  rather 
than  just  moving  mail  onto  DVDs, 
the  hospital  uses  Symantec’s  Enter¬ 
prise  Vault,  which  users  can  search 
from  their  own  mailboxes.” 

However,  saving  every  e-mail  ever 
sent  by  every  employee  carries  its 
own  risk. 

“E-mail  is  better  than  voice  mail 
in  that  people  tend  to  read  it  a 
couple  of  times  before  hitting  the 


Send  button.  But  e-mails  can  be 
misconstrued,”  says  Dave  Johnson, 
director  of  infrastructure  technolo¬ 
gies  at  the  financial  services  branch 
of  global  accounting  firm  Grant 
Thornton  International.  “Our  legal 
department  was  concerned  that 
saving  everything  could  be  a  risk.” 

Since  most  of  Grant  Thornton’s 
activities  are  not  covered  by  the 
U.S.  Securities  and  Exchange 


With  e-mail  pooling,  messages 
are  saved  to  a  repository  in  Zantaz 
Inc.’s  Enterprise  Archive  Solution. 
But  employees  can  decide  to  delete 
unimportant  messages  from  their  in 
boxes.  After  30  days,  that  message 
is  also  removed  from  the  central  re¬ 
pository.  The  30-day  grace  period 
gives  Johnson  and  his  team  time  to 
stop  the  deletion.  “E-mail  pooling 
bridges  the  gap  between  archiving 
everything  or  nothing,”  he  explains. 

-  SUE  HILDRETH 


Archiving 
has  been 
very  con¬ 
fusing  because 
there  are  different 
regulations  from 
different  bodies 
-  federal  and 
industry-specific. 

SARA  RADICATI,  CEO, 


Commission’s  broker- 
dealer  requirements 
for  the  retention  of  all 
e-mail  and  other  com¬ 
munications,  Johnson 
created  a  compromise 
for  archiving  e-mail.  His 
‘e-mail  pooling”  system 
enables  employees  to 
make  decisions  about 
which  e-mails  to  save 
or  delete,  yet  it  guards 
against  malicious  dele¬ 
tion  of  legally  important  materials. 


IP  address  with  a  known  bad  reputation, 
it  gives  it  a  bad  score,”  explains  Brady. 

In  the  past,  Brady’s  team  employed 
a  spam  filter  that  deleted  mail  tagged 
as  spam.  But  staffers  complained  that 
legitimate  e-mail  was  being  lost.  With 
the  current  approach,  spam  is  quaran¬ 
tined  on  the  appliance  and  users  get  a 
list  of  suspected  spam  e-mails  that  they 
can  opt  to  save,  delete  or  ignore. 

To  block  viruses  at  the  gateway,  the 
hospital  uses  Sophos  antivirus  soft¬ 
ware  on  the  IronPort  appliances,  as 
well  as  Iror.Port’s  SenderBase  Network 
service.  SenderBase  collects  data  about 
Internet  e-mail  traffic  in  an  effort  to 
find  new  virus  outbreaks.  For  added 
protection,  Sybari  Software  Inc.’s 
Antigen  product  is  deployed  on  the 


Exchange  servers  themselves.  “It’s  an¬ 
other  layer  of  protection  in  case  some¬ 
thing  makes  it  through  the  gateway,” 
Brady  explains. 


2  Monitoring 

OutboundMail 

Controlling  e-mail  that 
goes  out  of  the  hospi¬ 
tal  is  also  a  concern  at 
Cedars-Sinai,  mainly 
because  of  regulatory 
requirements. 

The  Health  Insurance  Portability 
and  Accountability  Act  (HIPAA)  re¬ 
quires  that  patient  data  be  kept  secure 
and  confidential,  explains  Brady,  who 
is  rolling  out  Zix  Corp.’s  Virtual  Pri¬ 


vate  Messenger.  Zix  VPM  scans  outgo¬ 
ing  mail  for  patient-related  keywords 
and  encrypts  them.  The  recipient  gets 
an  e-mail  with  a  link  to  the  encrypted 
message  on  the  Zix  server. 

Filtering  outbound  e-mail  prevents 
employees  from  exporting  corporate 
intellectual  property  or  content  that 
may  expose  personal  information 
about  customers  or  patients,  say  ex¬ 
perts.  Harassing  or  inflammatory  lan¬ 
guage  is  also  a  concern. 

Nevertheless,  actual  adoption  of  out¬ 
bound  filtering  has  been  sluggish.  In 
a  2005  survey  by  The  Radicati  Group 
Inc.,  only  22%  of  corporate  e-mail  us¬ 
ers  said  that  their  organizations  filter 
outbound  e-mail.  Another  42%  said 
their  e-mail  was  not  filtered,  while  36% 
said  they  had  no  idea. 

Because  outbound  filtering  is  similar 
to  inbound  filtering,  many  antispam 
vendors  are  getting  into  the  act.  “All 
the  major  [antispam  vendors]  are  pro¬ 
viding  it,”  says  Richi  Jennings,  an  ana¬ 
lyst  at  Ferris  Research  in  San  Francisco. 
“It’s  basically  using  the  same  kind  of 
technology  as  with  spam  filtering.” 

Jerry  Hook,  a  systems  manager  at 
University  Health  System  Inc.  in  Knox¬ 
ville,  Tenn.,  uses  CipherTrust  Inc.’s 
IronMail  to  scan  e-mail  sent  by  the 
hospital’s  4,200  employees.  The  anti¬ 
spam  product’s  Compliance  Profiling 
engine  allows  Hook  to  define  outgo¬ 
ing  content  that’s  unacceptable  or  that 
requires  encryption.  The  software  can 
block  or  encrypt  messages,  depending 
on  content  and  policy. 

“Patient  health  information  has  to 
be  encrypted  before  it’s  sent  over  the 
Internet,  according  to  HIPAA,”  says 
Hook.  “We  have  a  dictionary  specific 
to  HIPAA  that  CipherTrust  uses  to 
scan  Internet  mail.” 

Encryption  has  also  been  slow  to 
take  hold.  A  report  from  IDC  in  Fram¬ 
ingham,  Mass.,  reveals  that  companies 
have  not  made  much  use  of  it,  even 
though  many  e-mail  products  include 
encryption  capabilities.  But  the  in¬ 
crease  in  privacy  regulations  is  fueling 
interest  in  encryption  technologies. 

Of  course,  IT  managers  can’t  block 
or  encrypt  messages  that  don’t  go 
through  the  corporate  e-mail  system. 

To  prevent  employees  from  sending 
e-mail  out  via  their  personal  accounts, 
drug  research  firm  Kalypsys  Inc.  in 
San  Diego  blocks  certain  e-mail  proto¬ 
cols  and  Web  sites,  including  Internet 
Message  Access  Protocol,  Post  Office 
Protocol,  Hotmail  and  Yahoo  Mail. 

Kalypsys  uses  Websense  Inc.’s  En¬ 
terprise  URL  and  protocol-blocking 
software,  as  well  as  individual  port 
blocking.  The  main  reason  for  prevent- 
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ing  the  use  of  personal  e-mail,  says 
John  Graf,  associate  director  of  IT  at 
Kalypsys,  is  to  protect  the  company’s 
intellectual  property. 

“Our  hope  is  that  if  any  intellectual 
property  is  taken  and  sent,  we’ll  at  least 
have  a  record  of  that,”  explains  Graf. 

“If  we  ever  defend  a  patent,  we  can 
trace  how  it  got  out  of  the  company.” 


Archiving 
Critical  Content 

The  days  when  the  IT 
department  could  merely 
purge  the  e-mail  server 
of  all  messages  over  60 
days  old,  without  regard 
to  their  value,  are  long 
gone.  Retention  of  records,  including 
electronic  ones,  is  a  legal  requirement 
for  business  and  government  alike. 

According  to  a  2005  study  by  Enter¬ 
prise  Strategy  Group  Inc.,  e-mail  has 
become  the  most  frequently  requested 
type  of  business  record  by  courts  and 
regulators.  The  report,  “Digital  Ar¬ 
chiving  End-User  Survey  &  Market 
Forecast  2006-2010,”  found  that  77%  of 
organizations  involved  in  an  electronic 
data  discovery  request  have  been  asked 
to  produce  e-mail  messages  as  part  of  a 
legal  or  regulatory  proceeding. 

Kalypsys  archives  all  inbound  and 
outbound  messages  in  Quest  Software 
Inc.’s  Archive  Manager.  Graf  says  ar- 


N0T  EVERY  ACTIVITY  needs  to 
be  conducted  via  e-mail.  E-mail 
administrators  routinely  gripe  about 
employees  who  ship  huge  attach¬ 
ments  back  and  forth  via  e-mail  and 
then  save  them  on  the  e-mail  server 
instead  of  offloading  them  to  per¬ 
sonal  hies.  Here  are  three  comple¬ 
mentary  technologies  that  may  be 
better  suited  for  your  employees’ 
communication  needs: 

FTP.  The  good  old  File  Transfer 
Protocol  still  works  like  a  charm  for 
sharing  large  hies  without  replicat¬ 
ing  them  across  the  network.  And 
there  are  lots  of  FTP  clients  out 
there,  so  users  can  choose  which¬ 
ever  is  easiest  for  them. 

Team  work  spaces.  These  are 

chiving  is  valuable  not  only  in  order 
to  defend  a  patent,  but  also  to  stay  in 
compliance  with  FDA  rules,  the  Sar- 
banes-Oxley  Act  and  other  regulations 
that  require  the  retention  of  e-mail. 

Companies  often  have  irreplace¬ 
able  business  documents  —  contracts, 
partnership  negotiations,  possible  new 
product  strategies  —  stored  as  e-mail. 


software  products  that  provide 
collaborative  workspaces  equipped 
with  discussion  forums,  hie  sharing, 
version  control  and  instant  messag¬ 
ing.  The  idea  is  to  provide  project 
teams  with  a  virtual  workroom  that 
is  more  efficient  and  flexible  than 
collaborating  via  e-mail  alone. 

Wikis.  For  company-side  dis¬ 
cussions  or  postings,  wikis  are  a 
lightweight  method  for  getting  the 
information  out.  Wikis  are  editable 
HTML  pages  that  allow  authorized 
users  to  post  content  and  collabo¬ 
rate.  Wikis  offer  a  better  alternative 
to  sending  a  long  e-mail  with  cc’s 
to  half  the  company  (except,  inevi¬ 
tably,  one  key  employee). 

-  SUE  HILDRETH 

If  those  messages  and  attachments  are 
not  archived  in  a  centrally  managed  lo¬ 
cation,  the  odds  are  high  that  they’ll  be 
deleted  or  simply  lost  in  the  local  stor¬ 
age  of  hundreds  of  company  desktops. 

“IT  departments  that  blow  away  the 
contents  of  the  e-mail  systems  cre¬ 
ate  liability  and  risk  and  prevent  the 
company  from  actually  running  its 


business,”  says  Kahn,  adding  that  he 
has  seen  a  surge  in  companies  imple¬ 
menting  e-mail  retention  policies  and 
systems  over  the  past  two  years.  Even 
routine  e-mail  messages  can  become 
quite  valuable  as  a  repository  of  the 
company’s  working  knowledge  base. 

At  Kalypsys,  the  archive  is  also  used 
as  a  knowledge  management  tool. 

“Although  we  purchased  the  product 
originally  to  meet  compliance  issues, 
we  have  found  that  it  does  enable  some 
rather  imaginative  knowledge  manage¬ 
ment,”  says  Graf.  For  instance,  Archive 
Manager  allows  the  creation  of  virtual 
mailboxes  that  can  then  be  accessed  by  a 
group  of  authorized  employees. 

“So  our  IT  department  shares  access 
to  virtual  mailboxes  created  for  all  our 
major  vendors.  This  allows  anyone  in 
IT  to  access  all  the  orders  placed  by 
any  member  of  IT  with  that  specific 
vendor,”  according  to  Graf,  who  adds 
that  e-mails  with  customer  contact 
information  and  correspondence  are 
archived  so  that  such  information  isn’t 
lost  if  an  employee  leaves  Kalypsys. 

“This  is  particularly  helpful,”  says 
Graf,  “in  areas  such  as  business  devel¬ 
opment,  where  contact  information 
and  dialogues  are  maintained  even  if 
someone  leaves  the  company.”  ► 


Hildreth  is  a  freelance  writer  in 
Waltham,  Mass.  You  can  reach  her  at 
Sue.Hildreth@comcast.net. 
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STM  —  “a  really  hot  research  topic 
these  days”  —  may  someday  be  imple¬ 
mented  in  a  combination  of  hardware 
and  software,  says  Larus.  In  the  mean¬ 
time,  programmers  will  have  to  use  fine¬ 
grained  locking  —  in  which  individual 
rows  or  elements  of  a  table  are  locked, 
rather  than  the  whole  table  —  to  ensure 
correct  synchronization  in  parallel  pro¬ 
grams.  The  more  parallel  threads  there 
are,  the  more  difficult  that  becomes. 

Microsoft  products  won’t  require 
significant  changes  to  scale  from  two 
processors  (or  processor  cores)  to 
four  or  eight  processors,  other  than 
perhaps  some  performance  tuning,  ac¬ 
cording  to  Larus.  “But  when  you  start 
getting  to  bigger-scale  machines,  the 
question  becomes,  What  are  the  bot¬ 
tlenecks?”  he  says.  “If  you  have  more 
processors,  you  have  to  have  increas¬ 
ingly  fine-grained  locking.” 

Mind  the  Memory 

Aachen,  Germany-based  MainConcept 
AG  develops  software  for  encoding  and 
decoding  signals  such  as  high-definition 
video,  and  it  is  an  accomplished  prac¬ 
titioner  of  such  fine-grained  locking. 
Video  processing  is  a  computational 
challenge;  high-definition  movies  have 
to  be  processed  in  real  time,  and  each 
frame  takes  up  1MB  of  memory,  with 
each  slice  of  the  frame  requiring  exten¬ 
sive  mathematical  manipulation. 

MainConcept  has  tuned  its  software 
to  run  on  systems  with  dual-core  chips, 
with  the  cores  working  on  frame  slices 
in  parallel.  The  company  has  seen 
performance  improve  by  a  factor  of  1.8, 
says  MainConcept  CEO  Markus  Monig. 
He  says  performance  has  improved  by 
another  factor  of  1.8  through  the  use  of 
two  dual-core  processors.  Such  near- 
linear  speedups  are  very  close  to  ideal, 
with  any  gain  over  1.5  considered  good. 

The  software  uses  and  searches  “huge 
areas  of  memory,”  Monig  says.  If  the 
software  is  carefully  constructed,  it  can 
use  on-chip  cache  memory  for  much  of 
its  work,  speeding  processing.  Main- 
Concept  uses  performance-tuning  tools 
from  Intel  Corp.  to  tune  the  software 
to  the  hardware  architecture.  Intel’s 
VTune  Performance  Analyzer  helps  op¬ 
timize  the  code,  and  its  Thread  Profiler 
and  Thread  Checker  help  balance  the 
work  of  multiple  threads  and  identify 
bottlenecks  in  multithreaded  codes. 

But  Monig  worries  that  he  won’t  be 
able  to  boost  performance  linearly  as 
the  number  of  processor  cores  increases. 
“We  don’t  expect  this  for  eight-core,  16- 
core  and  beyond,”  he  says.  “The  faster 
and  the  more  cores  there  are,  the  more 
the  memory  access  is  the  bottleneck.” 

Code  writers  trying  to  exploit  mul- 


MULTITASKING:  Gives  the  user 
the  impression  of  concurrency.  A 
sequence  of  code  is  suspended  briefly 
while  some  other  code  runs  on  the 
same  processor.  In  multithreading,  one 
thread  pauses  while  another  runs  on 
the  same  processor. 

HYPERTHREADING:  An  Intel  term; 
multiple  threads  run  simultaneously  on 
one  processor. 

CHIP  MULTIPROCESSOR:  Two  or 

more  processing  units  on  one  chip  run¬ 
ning  separate  applications  or  a  single 
parallel  application.  They  may  have 
their  own  cache  or  share  cache. 

INSTRUCTION  PIPELINING:  The 

processor  begins  work  on  the  next 
instruction  before  the  previous  one  is 
complete.  Speed  is  increased  by  stor¬ 
ing  the  next  instruction  in  cache. 

SUPERSCALAR  PROCESSING:  The 

ability  to  execute  two  instructions  per 
clock  cycle. 

BRANCH  PREDICTION,  OUT-OF- 
ORDER  EXECUTION  AND  SPECU¬ 
LATIVE  EXECUTION:  Various  tech¬ 
niques  to  allow  simultaneous  execution 
of  parts  of  a  program  that  may  not 
be  strictly  parallel.  Instructions  are 
executed  conditionally  and  sometimes 
have  to  be  reversed. 

VECTOR  PROCESSING:  Scientific 
or  engineering  calculations  in  which 
an  entire  string  (vector)  of  numbers  is 
processed  with  one  operation. 


tiple  processors  or  processor  cores  face 
three  challenges,  says  James  Reinders, 
director  of  business  development  for 
Intel’s  software  development  prod¬ 
ucts.  The  first  is  scalability  —  how  to 
keep  each  additional  processor  busy.  A 
threefold  performance  boost  on  a  four- 
processor  system  is  “darn  good,”  he 


says;  anything  more  is  “exceptional.” 

The  second  challenge  is  “correct¬ 
ness”  —  how  to  avoid  race  conditions, 
deadlocks  and  other  bugs  characteris¬ 
tic  of  multiprocessor  applications.  In¬ 
tel’s  Thread  Checker  can  find  threads 
that  share  memory  but  do  not  synchro¬ 
nize,  which,  he  says,  “almost  always 
[indicates]  a  bug.” 

The  third  challenge  is  “ease  of  pro¬ 
gramming,”  Reinders  says,  modern 
compilers  can  help  by  finding  and  ex¬ 
ploiting  opportunities  for  parallel  proc¬ 
essing  in  source  code.  The  program¬ 
mer  can  help  the  compiler  by  including 
“a  few  little  hints”  in  the  code,  he  says. 

These  “hints”  are  available  in  a  new 
standard  called  OpenMP,  specifications 
for  compiler  directives,  library  routines 
and  environment  variables  that  can  be 
used  to  specify  parallelism  in  Fortran, 

C  and  C++  programs.  “The  alterna¬ 
tive  to  using  these  extensions  is  to  do 
threading  by  hand,  and  that  takes  some 
clarity  of  thought,”  Reinders  says.  “So 
OpenMP  can  be  tremendously  helpful.” 

Kennedy  agrees.  “My  philosophy 
is  the  programmer  should  write  the 
program  in  the  style  that’s  most  natu¬ 
ral,  and  the  compiler  should  recognize 
the  properties  of  the  chip  that  have  to 
be  exploited  to  get  reasonable  perfor¬ 
mance,”  he  says. 

Tom  Halfhill,  an  analyst  for  In-Stat’s 
“Microprocessor  Report”  in  San  Jose, 
says  some  software  developers  are  “tear¬ 
ing  their  hair  out”  over  the  new  CMP 
systems.  “Rewriting  the  software  for 
multithreading  is  a  lot  of  work,  and  it 
introduces  new  bugs,  new  complexities, 
and  the  software  gets  bigger,  so  there  is 
some  resistance  to  it.”  He  says  Fortran 
and  C++  don’t  contain  parallel  constructs 
natively,  whereas  Java  does,  so  the  move 
to  CMP  may  boost  Java’s  fortunes. 

But  the  CMP  train  has  left  the  station, 
whether  software  developers  like  it  or 
not.  Intel  says  85%  of  its  server  proces¬ 
sors  and  70%  of  its  PC  processors  will 
be  dual-core  by  year’s  end.  Halfhill 
predicts  that  in  five  years,  microproces¬ 
sor  chips  in  servers  will  have  eight  to 
16  cores,  and  desktop  machines  will 
have  half  that  number.  And,  he  says, 
each  core  will  be  able  to  process  at  least 
four  software  threads  simultaneously, 
a  technique  Intel  calls  hyperthreading 
(see  diagram,  page  29). 

The  angst  today  over  optimizing 
software  for  CMPs  is  a  little  like  that  of 
20  years  ago  when  developers  obsessed 
about  the  amount  of  memory  and  disk 
space  available,  says  Halfhill.  Now  both 
resources  are  so  cheap  and  plentiful  that 
most  applications  just  assume  that  they 
will  get  whatever  they  need. 

“In  five  to  10  years,  we’ll  get  to  the 


same  place  with  processor  cores,” 
Halfhill  predicts.  “There  will  be  so 
many  that  the  operating  system  will 
just  dedicate  how  many  cores  the  ap¬ 
plication  needs,  and  you  won’t  worry  if 
some  cores  are  being  wasted.” 

Up  Next 

Intel’s  Reinders  says  CMPs  will  give 
a  boost  to  hardware  virtualization 
—  by  which  a  computer  is  made  to  run 
multiple  operating  systems  —  with 
CMPs  allowing  for  a  more  fine-grained 
partitioning  of  a  machine.  It  is  pos¬ 
sible  to  carefully  control  and  allocate 
processing  resources  by  specifying,  for 
example,  that  a  certain  application  may 
use  two  cores  and  no  more,  while  some 
higher-priority  application  gets  four 
cores.  “If  you  map  virtualization  onto 
individual  cores,  you  can  get  more  pre¬ 
dictable  response,”  he  says. 

CMPs  offer  performance  advantages 
over  systems  with  multiple,  separate 
processors,  because  interprocessor  and 
processor-memory  communication  is 
much  faster  when  it’s  on  a  chip.  Rice 
University’s  Kennedy  predicts  that  will 
lead  to  hybrid  systems  consisting  of 
clusters  of  computers  running  multi¬ 
core  processors.  “Then  you  have  two 
kinds  of  parallelism:  cross-chip  paral¬ 
lelism,  perhaps  with  message  passing 
and  a  shared  memory,  and  on-chip  par¬ 
allelism,”  he  says.  Then,  functions  that 
require  very  high  interprocessor  band¬ 
width  can  be  put  on  a  CMP,  and  those 
that  don’t  can  be  distributed  across  the 
cluster.  Various  types  of  transaction 
processing  and  database  systems  could 
make  good  use  of  such  an  architecture, 
Kennedy  says. 

While  everyone  agrees  that  more 
processors,  more  cores  and  more  power 
can  generally  be  put  to  good  use  in  big 
enterprisewide  systems,  the  future 
of  CMPs  on  desktops  and  laptops  — 
where  even  single-core  processors  are 
idle  much  of  the  time  —  is  not  quite  so 
clear.  Multithreaded  game  software  can 
put  the  parallelism  to  good  use,  and  so 
perhaps  can  a  few  specialized  applica¬ 
tions,  such  as  speech  recognition. 

Single-processor-core  PCs  today 
can  take  advantage  of  multitasking,  in 
which  one  thread,  for  example,  deals 
with  display  while  another  does  a  long- 
running  computation  and  another  goes 
out  to  a  server.  But  what  to  do  with  eight 
processor  cores  all  running  at  3.6  GHz? 

Microsoft’s  Larus  says  he  knows 
people  are  probably  having  trouble 
imagining  how  a  single  user  might  take 
advantage  of  that  kind  of  system.  “To 
be  honest,  so  are  we,”  he  says.  “This 
is  a  subject  of  very  active  discussion 
here.”  » 
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XEROX  CORP.  acknowl¬ 
edges  that  it  has  a  bit 
of  an  image  problem. 
“Many  people  still 
mostly  associate  us  with  the  original 
Xerox  product,  the  copier,”  says  the 
$16  billion  company’s  new  chief  tech¬ 
nology  officer,  Sophie  Vandebroek. 

But  Vandebroek  and  the  600  scien¬ 
tists,  engineers  and  software  develop¬ 
ers  she  leads  in  the  Xerox  Innovation 
Group  (XIG)  are  working  hard  to 
change  that  perception.  The  company 
is  in  the  digital-  and  paper-document 
management  business  now,  and  it’s 
earning  two  patents  a  day  on  technolo¬ 
gies  —  from  microprocessors  to  color 
sensors  and  steganography  —  that  of¬ 
ten  originate  within  XIG. 

The  company’s  annual  report  refers 
to  “the  True  Colors  of  Xerox,”  meaning 
corporate  values  such  as  customer  ser¬ 
vice,  technological  innovation  and  social 
responsibility.  But  the  phrase  has  literal 
meaning  as  well.  Here  are  a  few  of  the 


research  projects  going  on  in  the  Color 
Studio  at  XIG’s  Webster,  N.Y.,  campus. 

■  The  human  eye  can  distinguish 
1  million  colors,  but  printers  have  a  col¬ 
or  “gamut”  of  just  half  that  number.  XIG 
has  developed  a  process  called  spatial 
gamut  mapping  that  fills  in  the  miss¬ 
ing  colors  with  colors  that  the  eye  and 
brain  will  interpret  as  more  detailed 


and  realistic  than  would  be  the  case  if 
the  most  accurate  colors  were  chosen 
based  on  a  spectrometer.  “Sometimes 


Xerox  researchers 

and 
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perception  trumps  accuracy  as  a  goal,” 
says  color  researcher  Karen  Braun. 

■  In  commercial  printing,  consis¬ 
tency  counts.  The  first  brochure  should 
look  just  like  the  last  one.  So  Xerox 
has  figured  out  a  way  to  equip  printers 
with  color  sensors  that  watch  pages 

as  they  fly  by  at  2  feet  per  second  and 
tweak  colors  as  the  print  job  proceeds. 
The  sensors  and  controllers  can  detect 
and  correct  color  deviations  far  faster 
and  more  accurately  than  a  human  op¬ 
erator  working  with  manual  controls, 
says  researcher  L.K.  Meshta. 

■  A  number  of  projects  deal  with  se¬ 
curity  —  such  as  how  to  prevent  coun¬ 
terfeiting.  One,  called  GlossMarks,  can 
print  an  image  that  appears  to  have  a 
second  image  embedded  in  it  —  a  little 
like  a  hologram  —  in  one  pass.  The 
second  image  can’t  be  copied.  And  an 
image  containing  Cor- 
relationMarks  looks  nor¬ 
mal  but  reveals  a  secret 
message  when  overlaid 
with  a  special  grid. 

GlossMarks  and  Cor- 
relationMarks  address  a 
tough  problem:  how  to 
secure  a  document  for  “a 
run  length  of  one,”  says 
Reiner  Eschbach,  a  lab 
manager  at  Xerox. 

Conventional  tech¬ 
niques  such  as  holo¬ 
grams  can  give  pretty 
good  security  at  a  rea¬ 
sonable  price  for  thou¬ 
sands  of  credit  cards 
containing  the  same 
hologram.  But  putting 
a  unique  hologram  on  a 
single  card,  while  technically  feasible, 
isn’t  economically  viable.  Eschbach’s 
team  dreams  up  low-cost  methods  that 
require  no  special  paper,  materials  or 
machine  modifications  yet  can  uniquely 
identify  and  protect  a  single  document. 

Tonier  Toner 

The  toner  used  in  most  copiers  and 
laser  printers  today  dates  to  1938,  when 
the  particles  in  powder  made  from 
grinding  up  the  lycopodium  plant  were 
found  to  have  a  good  shape  and  size  for 
printing.  Now  Xerox  has  found  a  way  to 
create  toner  particles  by  growing  them 
from  nano-size  particles  to  highly  opti¬ 
mized  sizes  and  shapes.  The  new  toner 
is  cheaper  to  produce  and  use  and  is 
more  reliable.  The  particles  are  so  fine 
and  frictionless  that  a  bottle  of  toner 
sloshes  like  a  liquid. 

But  that’s  not  the  end  of  toner  re¬ 
search.  Vandebroek  encourages  her 
scientists  and  engineers  to  “dream  with 
customers.”  One  unfulfilled  dream,  she 


says,  is  to  be  able  to  print  with  white  ink. 
‘We  have  cyan,  magenta,  black  and  yel¬ 
low,  but  you  can’t  make  white  from  that,” 
she  says.  “We  can  create  it.  The  question 
is,  How  do  you  bring  it  to  market?” 

In  any  case,  Vandebroek  says,  cus¬ 
tomers  have  bigger  pain  points.  Busi¬ 
nesses  print  4.5  trillion  pages  of  paper 
annually  and  spend  10%  to  15%  of  their 
revenue  on  document-intensive  activi¬ 
ties  —  two  to  three  times  more  than 
they  spend  on  research  and  develop¬ 
ment.  “And  half  the  time,  when  I’m 
looking  for  a  certain  document,  I  might 
not  find  the  latest  version,  or  I  might  not 
find  what  I’m  looking  for  at  all,”  she  says. 
‘I  have  way  too  much  paper  lying  around 
everywhere,  and  I  can’t  organize  it.” 

Solving  those  problems  means  re¬ 
defining  the  document  and  rethinking 
how  people  work,  Vandebroek  says. 

For  example,  a  Xe¬ 
rox  prototype  called 
Document  Categorizer 
automatically  indexes, 
categorizes  and  routes 
electronic  docu¬ 
ments.  Using  linguistic 
analysis  and  machine¬ 
learning  algorithms,  it 
applies  probabilistic 
models  derived  from 
a  collection  of  already 
categorized  documents 
to  assign  new  ones  to 
categories  —  such  as 
marketing  or  technical 
support  —  as  they  come 
in.  Xerox  is  using  the 
technology  to  analyze 
and  route  customer 
calls  and  correspon¬ 
dence,  and  a  European  customer  hopes 
to  use  it  to  eliminate  much  of  the  labor 
in  its  mailroom. 

But  real-time  color  sensors  and  a 
quest  for  white  ink  are  only  what’s 
glimpsed  in  a  narrow  look  at  XIG.  At  a 
higher  level,  it’s  all  about  the  synthesis 
of  images  and  information,  says  Sid 
Dalai,  vice  president.  He  says  an  era  of 
ubiquitous  imaging  is  dovetailing  with 
an  era  of  ubiquitous  computing. 

Dalai  offers  as  an  example  a  technique 
that  Xerox  developed  by  which  an  image 
that  starts  out  in  color  can  be  converted 
to  an  encoded  black-and-white  image 
for  faxing  and  then  printed  by  the  recipi¬ 
ent  in  color.  More  broadly,  “there  can  be 
metadata  and  a  model  from  which  you 
can  create  images,”  he  says.  “The  image 
may  not  even  be  there,  but  the  metadata 
will  allow  creation  of  a  new  image  from 
an  old  image,  and  it’s  transferable  to  any 
computing  device  and  network. 

“We  are  really  bringing  the  world  of 
information  and  documents  together.”  * 


Xerox  spends  $1.7  bii¬ 
on  research, 
development  and  engineer¬ 
ing,  including  the  R&D 
done  at  Fuji  Xerox  Co.  The 
company’s 

-  three  in  the 
U.S.,  one  in  Canada  and 
one  in  France  -  include 
the  legendary 

now 

a  Xerox  subsidiary  that  also 
does  contract  research  for 
other  companies.  All  of  the 
centers  do  ' 

product-oriented  re¬ 
search,  as  well  as  longer- 
term,  “blue-sky”  work. 
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ITS  ALL  ABOUT  THE 


You  might  think  of  Xerox  as  the 
copier  company,  but  its  Xerox  Innovation 
Group  is  working  at  the  intersection  of 
information  and  documents.  By  Gary  Anthes 


When  HQ  Is  Over  There 

It  takes  a  combination  of  close  attention, 
social  savvy  and  intuition  for  the  CIOs  of 
U.S.  subsidiaries  to  strike  up  successful 
relationships  with  bosses  and  other 
executives  located  half  a  world  away. 
PAGE  38 


Steering  the 
Steering  Committee 

Guiding  the  activities  of  your  IT  steering 
committee  and  getting  the  most  out  of  its 
efforts  can  be  tricky.  Life  Time  Fitness  CIO 
Brent  Zempel  and  three  other  IT  execu¬ 
tives  explain  how  they  do  it.  PAGE  39 


OPINION 

Stifling  IT  Innovation 

It’s  easy  to  demand  innovation 
from  IT,  says  Bart  Perkins,  but 
when  it  comes  to  delivering,  IT 
often  finds  that  the  deck  is  stacked 
against  it.  PAGE  41 


IT  leaders  are  working  harder  to  find  and  keep  top  talent.  ARY  K.  PRATT 


WHEN  BILL  CORLEY  sought 
to  hire  an  entry-level 
help  desk  worker  four 
years  ago,  he  received 
500  responses  from  highly  qualified 
candidates  within  two  days  of 
posting  an  ad  on  Monster.com. 

When  he  posted  the  same  job 
a  few  months  ago,  he  had  only 
40  responses  after  a  week. 

“People  who  were  unemployed  four 
years  ago  are  now  either  reabsorbed  or 
are  in  different  fields,”  says  Corley,  CIO 
at  engineering  firm  SEA  Consultants 
Inc.  in  Cambridge,  Mass. 


He’s  not  the  only  one  who  has  felt 
the  pinch  of  a  tightening  labor  market. 

Noah  A.  Broadwater,  vice  president 
of  information  systems  at  nonprofit 
Sesame  Workshop  in  New  York,  says 
he  recently  lost  a  few  of  his 
workers  to  higher-paying  jobs 
at  for-profit  companies. 

And  Clint  Wood,  an  applica¬ 
tion  systems  manager  for  the 
Southwest  Florida  Water  Manage¬ 
ment  District,  has  lost  a  half-dozen 
staffers  from  his  27-member  group  in 
the  past  year.  He  says  it  takes  longer 
to  find  qualified  applicants;  he  had  to 


VITAL 

SIGNS 


repost  one  .Net  developer  position  a 
few  times  before  getting  any  desirable 
candidates. 

In  Computer-world's  first  quarterly 
online  Vital  Signs  poll  of  300  IT  lead¬ 
ers,  many  respondents  reported  that 
it’s  tougher  to  bring  in  the  right  IT  tal¬ 
ent  today  than  it  was  just  a  year  ago. 
Moreover,  some  said  they’re  seeing  a 
bigger  turnover  in  existing  staffs  this 
year,  too.  As  a  result,  they’re  adjusting 
their  employment  strategies,  reconsid¬ 
ering  hiring  criteria  and  compensation 
packages,  and  contemplating  the  use  of 
more  outsourced  talent. 


Company  culture  is  as  important  as 
salary  in  hiring  and  keeping  top  talent, 
says  NOAH  A.  BROADWATER,  vice 
president  of  information  systems  at 
.-'Sesame  Workshop. 


’Average  increase:  15%  ’’Average  decrease:  12% 


Base:  300  IT  professionals 


Computerworld  Vital  Signs  online  survey.  May  2006 
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WHEN 


BOVER 

THERE 


CIOs  for  U.S.  divisions  of  foreign-based 
companies  grapple  with  big  differences 
in  cultures  and  management  styles. 

By  Thomas  Hoffman 


WHEN  RUSS  FINNEY  travels  to  Japan  as  the 

CIO  of  Austin-based  Tokyo  Electron  Amer¬ 
ica  Inc.,  he  knows  that  many  of  the  strategy 
sessions  in  which  the  biggest  decisions  will 
be  made  won’t  take  place  in  conference  rooms  or  board 
meetings,  but  in  restaurants  and  nightclubs. 

During  the  dozen  years  he’s  been  in  his  role,  Finney 
has  learned  a  lot  about  the  differences  in  manage¬ 
ment  styles  and  cultures  between  the  U.S.  and  Japan, 
including  a  tendency  among  Japanese  businesspeople 
to  make  decisions  in  informal,  after-hours  settings. 
“Learning  the  subtleties  in  the  business  culture  is  an  art, 
and  it  takes  a  person  who  wants  to  gain  a  deeper  un¬ 
derstanding  of  those  cultural  differences,”  says  Finney. 

CIOs  of  U.S.  subsidiaries  need  a  combination  of 
keen  observation  skills,  social  savvy  and  intuition  to 
strike  up  successful  relationships  with  executives  half 
i  world  away.  “There  are  no  right  or  wrong  cultures, 
but  some  Americans  perceive  that  the  American  cul¬ 
ture  should  be  the  global  norm,”  says  Don  Southerton, 
president  and  CEO  of  Bridging  Culture,  a  consulting 
firm  in  Vista,  Calif.  That  kind  of  mind-set  will  get  you 
into  trouble,  he  says.  “The  most  challenged  American 
executives  are  those  who  have  the  least  global  experi¬ 
ence,”  says  Southerton. 

In  contrast,  successful  CIOs  pay  careful  attention  to 
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cultural  nuances  when  they  interact  with  foreign  man¬ 
agers.  Dave  Rice,  CIO  at  Malvern,  Pa.-based  Siemens 
Medical  Solutions  USA  Inc.,  a  wholly  owned  subsidiary 
of  Siemens  AG,  recalls  a  conference  in  which  a  group 
of  IT  and  business  managers  in  Knoxville,  Tenn.,  were 
relaying  information  about  a  worldwide  customer 
management  system  to  peers  in  Japan. 

“We  would  say  stuff,  and  then  there  would  be  dead  si¬ 
lence  on  the  other  end,”  says  Rice.  After  this  happened 
several  times,  the  U.S.  managers  began  to  wonder  if 
they’d  lost  their  telecommunications  connection.  Then 
a  Japanese  manager  spoke  up  and  said  they  preferred  to 
consider  what  was  being  said  more  before  responding. 

“The  difference  is  that  here  in  the  U.S.,  it’s  a  quick 
turn-of-the-crank  type  of  response,”  says  Rice. 

Land  of  Consensus 

One  of  the  most  striking  differences  between  U.S. 

and  Japanese  executives  is  how  each  group 
makes  decisions.  In  the  U.S.,  management 
tends  to  arrive  at  decisions  quickly,  using  a  top-down 
approach. 

Japanese  businesspeople  make  decisions  more 
slowly  and  by  consensus,  using  an  approach  known 
as  nemawashi,  which  means  “tending  the  roots.”  In 
Japan,  a  business  director  might  float  an  idea  to  mid¬ 
dle  managers  first  and  then  try  to  build  a  consensus 
for  it  before  introducing  it  to  senior  executives. 

But  the  more  time-consuming,  consensus-building 
approach  has  its  drawbacks,  particularly  in  today’s  fast- 
paced  business  environment.  “In  a  larger  organization, 
[consensus-based]  decision-making  can  be  impeded  by 
size,”  notes  Robert  Schwartz,  CIO  at  Matsushita  Elec¬ 
tric  Industrial  Co.’s  Panasonic  Corporation  of  North 
America  division  in  Secaucus,  N.J. 

Fortunately  for  Schwartz,  Matsushita’s  chairman  re¬ 
structured  the  company  five  years  ago,  bringing  greater 
alignment  among  its  worldwide  sales,  manufacturing, 
and  research  and  development  teams.  Those  changes 
have  resulted  in  faster  decision-making,  says  Schwartz. 

But  Schwartz  and  other  American  CIOs  at  Japanese 
companies  have  learned  how  to  adapt  to  the  decision¬ 
making-by-consensus  style.  “One  of  the  things  you 
have  to  learn  is  when  to  stop  pushing  when  it’s  clear 
that’s  the  direction  [the  company  is]  heading  in,  even  if 
you  disagree  with  it,”  says  Terry  Brooks,  general  man¬ 
ager  of  the  information  services  division  at  Yamaha 
Motor  Corp.,  USA.  “At  some  point,  you  have  to  stop 
swimming  upstream.” 

U.S.  CIOs  are  also  sometimes  challenged  by  compet¬ 
ing  objectives  on  different  continents.  For  instance, 
Brooks  describes  how  Japanese  management  wanted 
the  Cypress,  Calif.-based  Yamaha  Corp.  subsidiary 
to  standardize  on  Lotus  Notes  instead  of  Microsoft 
Outlook  and  to  implement  other  software  systems  that 
were  well  suited  for  Japanese  operations  but  not  neces¬ 
sarily  for  those  in  the  U.S. 

Brooks  says  he’s  had  “some  success”  articulating 
to  Japanese  management  that  rather  than  standard¬ 
izing  on  different  software  systems,  it  might  make 
more  sense  “to  focus  on  achieving  a  certain  level  of 
capability.” 

Still,  many  CIOs  say  they  have  a  fair  amount  of  auto¬ 
nomy  when  it  comes  to  the  types  of  systems  and  IT 
methodologies  they  put  in  place.  That’s  due  in  part  to 
a  widespread  perception  that  U.S.  IT  organizations  are 
leaders  in  adopting  new  technologies  and  management 


strategies.  “Japanese  management  has  given  me  the 
latitude  to  make  investments  and  decisions  without 
having  to  go  back  to  headquarters  and  ask,  ‘May  I?’  ” 
says  Schwartz,  who  has  been  in  his  role  for  eight  years. 

For  Rice,  having  a  Germanic  background  —  his 
maternal  grandmother  was  born  in  Germany,  and  he 
served  there  while  in  the  military  —  has  helped  him 
to  better  understand  the  culture  of  his  company.  “My 
mother  will  ask  me  what  it’s  like  to  work  for  a  German 
guy,”  says  Rice,  who  reports  to  the  German-born  head 
of  Siemens’  U.S.  shared-services  division  and  has  dot¬ 
ted-line  reporting  to  the  CIO  at  Siemens  in  Germany.  “I 
tell  her,  ‘That’s  the  easy  part.  It’s  the  guy  in  New  Jersey 
and  the  guy  in  California  who  drive  me  nuts.’  ” 

Still,  Rice  acknowledges  that  there  are  differences 
in  the  ways  Germans  and  Americans  approach  busi¬ 
ness  that  he  and  his  German  counterparts  have  had 
to  get  used  to.  For  example,  when  a  German  gives  a 
presentation  about  a  project,  the  information  is  exten¬ 
sively  documented  with  lots  of  statistics  and  details.  In 
comparison,  Americans  tend  to  rely  upon  PowerPoint 
presentations  that  are  peppered  with  headlines  but 
contain  fewer  details.  “Our  strengths  lie  somewhere  in 
the  middle,”  says  Rice. 

Another  big  challenge  for  U.S.  CIOs  is  gaining  an  un¬ 
derstanding  of  the  corporate  strategy  from  thousands 
of  miles  away  and  aligning  that  with  your  organiza¬ 
tion’s  domestic  strategy, 
says  Finney.  “If  you’re 
working  in  a  foreign 
subsidiary,  you’re  a  little 
distant  from  it,”  he  says. 

And  he’s  talking  about 
more  than  miles. 

Finney  finds  that 
Tokyo  Electron’s  ex¬ 
tensive  use  of  video- 
conferencing  helps  to 
narrow  communication 
gaps  when  face-to-face 
meetings  between  Japa¬ 
nese  and  American  ex¬ 
ecutives  aren’t  possible. 

“You  can  see  disagree¬ 
ment  or  concern  [on 
their  faces]  where  they 
might  not  otherwise 
voice  it,”  he  says. 

Perceptions  are  also 
very  important.  Because 
Japanese  culture  doesn’t 
embrace  failure  as  a 
learning  tool  as  some 
U.S.  companies  do,  in 
Japanese  business,  any 
project  or  investment 
that’s  viewed  as  unsuc¬ 
cessful  is  unacceptable, 
says  Brooks.  So  it’s 
important  to  accentuate 

the  positive.  “Even  failure  can  be  a  success  if  you  posi¬ 
tion  it  the  right  way,”  he  says. 

Finally,  when  visiting  Japan,  it  doesn’t  hurt  to  have  a 
few  karaoke  songs  in  your  repertoire,  because  it’s  not 
unusual  for  after-hours  nightclub  strategy  sessions  to 
include  a  turn  at  the  microphone.  “I’m  an  Elvis,  Dean 
Martin  and  Beatles  kind  of  guy,”  Brooks  says.  ► 


Improve 

Your 

Cultural 

Karma 

■  Be  open-minded.  Don’t  think 
of  cultures  as  superior  or  infe¬ 
rior- just  different. 

■  Strategy  sessions  may  take 
place  after  hours  in  informal 
environments.  Get  used  to  it. 

■  Don’t  be  afraid  to  lobby  for  a 
different  approach,  but  know 
when  to  back  off. 

■  Be  sensitive  to  cultural  norms 
and  taboos,  and  plan  your 
presentations  accordingly. 

■  Use  electronic  tools  like  video- 
conferencing  to  help  close 
the  communication  gap  with 
distant  colleagues. 

■  Learn  to  meld  the  best  of  both 
worlds  into  a  superior  way  of 
working. 

-THOMAS  HOFFMAN 


www.computerworld.com 


MANA6EMENT 


July  10, 2006  C9MPUTERW0RL0 


41 


EXEC  TRACK 


YeIlowpages.com 
Names  Mohs  CTO 

Yellowpages.com  LLC,  a  joint 
venture  of  AT&T  Inc.  and  Bell¬ 
South  Advertising  and  Publishing 
Corp.,  announced  the  addition  of 
BRAD  MOHS  as  chief  technology 
officer.  Mohs  joins  the  company 
from  Scientific  Games  Corp., 
where  he  was  senior  vice  presi¬ 
dent  of  software  engineering. 
Previously,  he  served  as  CTO  at 
AutoTrader.com  LLC. 

Mat heny  Is  Chosen 
As  CTO  at  AdValiant 

JOSEPH  MATHENY  has  joined  Ad- 
Valiant  Inc.,  a  New  York-based 
online  advertising  company,  as 
CTO.  Matheny’s  online  media 
experience  dates  to  1988  with 
some  of  the  early  bulletin  board 
systems  that  preceded  the  In¬ 
ternet.  Most  recently,  he  was  in 
charge  of  product  management 
and  marketing  at  introNetworks 
Inc.,  a  vendor  of  corporate  social 
networking  platforms. 


Deland  Is  Promoted 
To  CIO  at  La-Z-Boy 

La-Z-Boy  Inc.  has  promoted 
DANIEL  DeLAND  to  CIO  from  the 
position  of  director  of  technical 
business  solutions.  He  began  his 
career  at  Monroe,  Mich.-based 
La-Z-Boy  in  1999  as  manager 
of  application  services.  Prior  to 
joining  La-Z-Boy,  DeLand  was  a 
senior  systems  engineer  at  Elec¬ 
tronic  Data  Systems  Corp.  He 
will  report  to  Otis  Sawyer,  senior 
vice  president  of  corporate  op¬ 
erations,  who  previously  held  the 
CIO  position. 


Walden  to  Head  IT 
At  YTXP  Corp. 

YTXP  Corp.,  a  Richardson, 
Texas-based  provider  of  pre¬ 
manufacturing  services  for  the 
electronics  industry,  has  hired 
ROBERT  WALDEN  for  the  newly 
created  position  of  CIO.  Walden 
was  previously  chief  architect 
and  manager  for  emerging  tech¬ 
nologies  at  7-Eleven  Inc.  He  was 
also  a  systems  architect  at  Citi- 
Financial  Mortgage  Corp.  and 
director  of  Internet  marketing  at 
The  Associates. 


BART  PERKINS 


Stifling  IT  Innovation 


WHEN  THE  BOARD  SAYS,  “Be  more 

innovative,”  many  CEOs  turn  to 
their  CIOs.  Requests  for  innovation 
also  come  from  other  departments 
after  they  hear  about  new  technolo¬ 
gies  from  vendors  or  trade  magazines.  As  a  result,  many 
IT  organizations  are  being  told  to  be  more  creative,  and 
articles  stating  that  the  CIO  should  become  the  “chief 
innovation  officer”  abound. 


If  IT  doesn’t  provide 
some  of  the  innovations  re¬ 
quested,  other  departments 
may  look  elsewhere.  Many 
vendors  are  only  too  willing 
to  bypass  the  CIO  and  sell 
to  other  executives  directly. 

These  sometimes  haphazard 
technology  additions  may 
include  products  that  are 
harmful  to  the  company’s 
infrastructure.  In  addition, 
they  may  be  installed  with¬ 
out  adequate  consideration 
of  compliance  requirements, 
architectural  integrity, 
documentation  needs  or  se¬ 
curity  and  backup  issues. 

But  industry  changes  in 
recent  years  have  made  it 
increasingly  difficult  for 
most  IT  organizations  to 
innovate.  Here’s  why: 

Political  and  financial  pressures.  Y2k 
efforts  consumed  massive  financial 
resources  without  providing  many  vis¬ 
ible  benefits.  (Disaster  prevention  is  a 
thankless  job.)  Many  business  executives 
concluded  that  IT  had  seriously  over¬ 
spent  and  underdelivered.  Combine  that 
mind-set  with  the  huge  expenses  and  un¬ 
met  expectations  of  the  dot-com  bubble, 
and  the  result  was  that  many  CIOs  and 
IT  organizations  lost  their  credibility. 
When  the  recession  hit,  IT  budgets  were 
slashed,  and  many  CIOs  were  forced  to 
cut  virtually  ail  discretionary  spending. 
That  funding  has  been  slow  to  return  to 
most  IT  budgets. 

Outsourcing.  While  outsourcing  has 
many  benefits,  it  often  results  in  brain 
drain.  After  major  outsourcing  efforts, 
the  character  of  the  remaining  work  is 
substantially  different,  shifting  from  de¬ 


velopment  and  operational 
concerns  to  monitoring  and 
managing  the  outsourcer(s) 
and  programs.  Many  innova¬ 
tive  developers  go  elsewhere. 

Laser  business  focus.  Suc¬ 
cessful  executives  require 
the  use  of  business  cases 
to  ensure  that  projects  will 
meet  corporate  business 
needs.  But  an  overly  heavy 
focus  on  provable,  quantifi¬ 
able  ROI  frequently  discour¬ 
ages  funding  those  “creative 
leap”  projects  that  are  often 
necessary  for  breakthrough 
innovation.  For  example, 
ATMs  originally  showed 
very  low  ROI  and  were  con¬ 
sidered  a  financial  risk. 

Re-engineering  failures. 
Re-engineering  can  gener¬ 
ate  creative  and  innovative  solutions  to 
problems.  Because  of  some  spectacular 
failures  in  recent  years,  however,  re¬ 
engineering  efforts  have  been  largely 
(often  unfairly)  discredited  and  mostly 
abandoned.  Many  specialists  have  moved 
to  other  disciplines. 

The  nature  of  IT.  Delivering  and  sup¬ 
porting  IT  capabilities  in  today’s  busi¬ 
ness  environment  requires  more  logic, 
discipline  and  attention  to  detail  than 
creativity.  For  example,  an  effective  sys¬ 
tems  development  methodology  requires 
compliance,  not  innovation. 

What’s  a  CIO  to  do?  There  is  no  “cre¬ 
ativity  pill”  for  your  IT  organization. 

At  a  minimum,  innovation  requires  four 
things: 

■  People.  Leverage  the  talents  of  your 
naturally  creative  people,  borrow  some 
from  other  departments  (such  as  mar¬ 
keting  or  R&D),  or  hire  consultants  to 
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is  managing  partner  at 
Louisville,  Ky.-based  Lever¬ 
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helps  organizations  invest 
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help  generate  innovative  ideas. 

■  Process.  Advertising  and  other 
creative  professionals  employ  various 
tools  and  techniques  to  foster  creativity. 
Implement  your  own  techniques  for  en¬ 
couraging  the  creative  process,  as  recom¬ 
mended  in  recent  industry  publications. 

■  Perspective.  Make  a  conscious  shift. 
Most  people,  including  IT  staffers,  in¬ 
stinctively  focus  on  day-to-day  issues 
rather  than  long-term  creative  solutions. 
Consistently  allocate  some  management 
time  for  focusing  on  innovation.  (Your 
job  may  depend  on  it  someday,  whether 
or  not  it  appears  in  your  performance 
objectives.) 

■  Public  recognition.  Reward  innovation 
publicly,  and  use  financial  incentives  and 
other  perks  specific  to  your  company’s 
culture  to  encourage  creativity. 

In  addition,  synchronize  your  in¬ 
novative  endeavors  to  your  company’s 
business  cycle.  Companies  experiencing 
downturns  are  often  unable  to  fund  ex¬ 
pensive  innovation  efforts.  But,  as  Clay¬ 
ton  Christensen  warns  in  The  Innovator’s 
Dilemma  (Collins,  2003),  successful, 
complacent  companies  must  ultimately 
innovate  or  die. 

Above  all,  manage  executive  expecta¬ 
tions  regarding  staffing  and  scheduling. 
Innovation  is  a  process,  not  a  project. 
Great  ideas  often  require  a  long  incuba¬ 
tion  period.  They  can’t  be  scheduled  or 
mandated. 

3M,  noted  for  producing  many  inno¬ 
vative  products,  gives  its  researchers  a 
percentage  of  their  work  time  to  pursue 
projects  that  interest  them,  without  a 
required  outcome.  The  company  recog¬ 
nizes  that  an  innovative  idea  may  take 
months  or  even  years  to  bear  fruit.  Many 
of  3M’s  most  notable  innovations  have 
come  from  these  research  efforts. 

Unfortunately,  today’s  IT  organiza¬ 
tions  are  often  not  structured  to  innovate 
effectively.  Unless  your  corporation  is 
willing  to  foster  a  creative  environment, 
employ  appropriate  staffers  and  support 
the  creative  process  (both  politically 
and  financially),  innovation  will  be  sti¬ 
fled.  Be  realistic  about  what  innovation 
requires.  It’s  hard  to  leverage  what  you 
don’t  have.  ► 
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- a  new  era  of  VoIP  analysis - 

You  convinced  management  to  deploy  VoIP. 
Now  ensure  that  it  will  run  smoothly. 

Rely  on  Network  Instruments'  Observer  to  help  keep 
VoIP  communications  running  at  optimal  performance. 
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“Endless  indexing  is  now  a  breeze”  —  ComputerWorld 


For  hundreds  more  reviews  and  developer 
case  studies,  see  www.dtsearch.com 

Contact  dtSearch  for  fully-functional 
evaluations 


♦  over  two  dozen  indexed,  unindexed,  fielded  data 
and  full-text  search  options 

♦  highlights  hits  in  HTML,  XML  and  PDF,  while 
displaying  [inks,  formatting  and  HliMilJiL. 

♦  converts  other  file  types  (word  processor,  database, 
spreadsheet,  email  &  attachments,  ZIP,  Unicode, 
etc.)  to  HTML  for  display  with  highlighted  hits 

♦  Spider  supports  static  and  dynamic  Web  content, 
with  WYSWYG  hit-highlighting 

♦  optional  API  for  C++,  .NET,  Java,  SQL,  etc. 

Ask  about  new  .NET  Spider  API 


Developer  .Quotes  andjteviews 


dtSearch  vs.  the 
competition: 
“dtSearch  easily 
overpowered  the 
document  indexing 
and  searching 
abilities  of  other 
solutions, 
especially  against 
large  volumes  of 
documents” 

Reliability: 
“dtSearch  got  the 
highest  marks 
from  our  systems 
engineering  folks 
that  I’ve  ever 
heard  of” 

Results:  “customer 
response  has  been 
phenomenal” 


“Bottom  line:  dtSearch 
manages  a  terabyte  of  text 
in  a  single  index  and 
returns  results  in  less  than 
a  second”  —infoWoriti 

“The  most  powerful 
document  search  tool  on 

the  market”  —  Wired  Mag. 

“For  combing  through  large 
amounts  of  data,”  dtSearch 
“leads  the  marker 

—  Network  Computing 

“Blindingly  fast” 

—  Computer  Forensics: 
Incident  Response  Essentials 

“Covers  all  data  sources ... 
powerful  Web-based 
engines”  —  eWEEK 

“Searches  at  blazing 
speeds”  —  Computer 


The  Smart  Choice  for  Text  Retrieval®  since  1991 


Reseller  News  Test  Center 


Systems  Administrator: 

Responsible  for  performing  h/w 
and  s/w  installations  and  upgrades, 
developing  UNIX  shell  scripts  and 
architecting  system  performance 
and  system  tuning  enhancements. 
Coordinate  changes  to  environment 
with  s/w  vendor  and  operations, 
interact  with  s/w  development 
teams  to  resolve  issues  and 
document  action  taken.  Reqs: 
BS  in  C.S.  or  for.  equiv.  +  2  years 
experience  configuring,  installing, 
upgrading  and  maintaining  h/w 
and  s/w.  Hands  on  experience 
on  Solaris,  MVS,  UNISYS, 
Weblogic  8.1 ,  Jboss,  Webmethods. 
BiglP,  NFS,  HP-UX  and  Firewalls. 
Send  resume  to  DeeBeCon,  1 
Tara  Blvd.  Suite  LL7,  Nashua, 
NH  03062.  Fax:  603891-1452. 
Email:  jobs@deebecon.com. 


PROGRAMMER  ANALYST 

w/3yrs  exp  to  analyze,  develop, 
test,  implement,  maintain  & 
deploy  client  server  &  web 
applications  using  Visual  Basic, 
ASP,  Visual  Studio. Net,  Net 
Framework,  MSMQ,  PHP,  Perl, 
Crystal  Reports,  J2EE,  Oracle, 
MY-SQL  Server  &  SQL  Server 
on  Unix  &  Windows.  Model 
database  using  Erwin.  Mail 
resumes  to:  Icarz  Inc.,  3  Wing 
Drive, Ste#250, Cedar  Knolls,  NJ 
07927. Job  loc:Cedar  Knolls,  NJ. 


Web  Designer  for  computer 
components  distributor. 
Master  in  Graphic  Design 
or  Communication  Design 
req'd.  MA  Labs,  2075  N. 
Capitol  Ave.,  San  Jose, 
CA  95132.  Attn:  H.R  Gary 
Chung.  Ref.  #  95132. 
Jobsite:  San  Jose. 
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Law  Firms 
IT  Consultants 
Staffing  Agencies 


Place  . 
your 
Labor 

Certification 
Ads  here! 

Are  you  frequently  placing 
legal  or  immigration 
advertisements? 

Let  us  help  you  put 
together  a  cost  effective 
program  that  will  make  this 
time-consuming  task  a  little 
easier. 


Contact  us  at: 

iT|careers 

800.762.2977 


PROGRAMMER  ANALYST, 

Multiple  Openings.  Job  located 
in  Newark,  Delaware  and  various 
unanticipated  client  sites  throughout 
the  United  States.  Analyze,  design, 
develop,  modify  and  implement 
software/systems  applications 
in  a  client/server  environment; 
will  also  design,  implement  and 
maintain  various  programming 
and  operating  systems;  will 
work  in  a  team  environment 
testing  and  developing  software/ 
systems  applications  in  accordance 
with  project  specifications;  will 
also  work  under  the  close 
supervision  of  the  project  manager. 
Minimum  of  a  Bachelor's  Degree 
or  equivalent  in  Computer 
Science,  CIS,  Engineering, 
Mathematics,  Electronics, 
Business,  Management, 
Technology  or  a  related  field 
required;  position  also  requires 
extended  travel  and/or  relocation. 
No  prior  professional  experience 
ju  package.  Mail  resumes  to: 
American  Solutions,  Inc.,  Job 
#PA01,  100  Commerce  Drive, 
Suite  103,  Newark,  DE  19713. 


Programmer  Analyst: 

Responsible  to  convert 
specifications  and  logical 
flow-charts  into  computer 
programs  and  develop  application 
programs  for  ERP,  ECOM 
implementation,  and  Legacy 
systems  Integration.  Code  complex 
software  application  programs 
using  J2EE  technologies  on 
Windows  and  Solaris  Platforms. 
Programming  Front-  and  Back¬ 
ends  using  J2EE,  STRUTS 
Framework.  MQ  Series,  Unrface 
8.3.02,  and  Sun  One  Server 
Version  7.0.  Requires:  BS  in  CS 
or  for.  equiv.  +  5  yrs  server  side 
code  development.  Hands  on 
experience  in  J2EE,  STRUTS 
Framework,  MQ  Series.  Uniface 
8.3.02,  Sun  Server  One  Version 
7.0.  Send  resume  to  DeeBeCon, 
1  Tara  Blvd.  Suite  LL7,  Nashua,  NH 
03062.  Fax:  603-891-1452. 
Email:  jobs@deebecon.com. 


Software  Engineers  for  Naperville, 
IL.  Design  &  Develop  software 
using  Oracle,  Developer  2000, 
Designer  2000,  SQL  Server,  DB2, 
J2EE,  ASP,  UML,  VB,  .Net,  C#, 
Windows,  Unix  and  Linux. 
Masters  or  Eqv*  in  Computers, 
Eng.,  Math  or  related  field 
(•Bachelors  or  Eqv.(academic  + 
exp.)  +  5  yrs  of  progressive 
related  work  exp.).  Animation 
Analysts  for  Naperville,  IL. 
Bachelors  or  Eqv.  (academic  + 
exp.)  in  Computers,  Eng.,  Math, 
Accounts,  Commerce  or  related 
field  +  2  yrs  of  related  work 
exp.).  40  hrs/Wk.  Must  have  legal 
authority  to  work  permanently 
in  the  US.  May  be  relocated  to 
various  unanticipated  location 
throughout  the  US.  Contact  HR, 
Libsys,  Inc,  2020  Calamos  Ct, 
#  236,  Naperville,  IL  60563. 

Sr  SW  Engr  Research,  design 
&  develop  comp  sw  sys  w/ 
product  development  for  comm 
apps  based  on  Linux,  Java  & 
XML.  Min  req’t:  Ph.D.  in 
Math/CS/CE  or  MS  CS/CE  +  2 
yrs  of  relevant  exp.  Duties: 
www.telchemy.com/empSoy- 
ment.html  Jobsite:  Duluth, 
Georgia.  Please  send  resume 
to  careers@telchemy.com 
quoting  reference  SRE02. 


SOFTWARE  ENGINEER, 

Multiple  Openings.  Job  located 
in  Newark,  Delaware  and  various 
unanticipated  client  sites 
throughout  the  United  States. 
Research,  design,  develop  and 
test  software/systems  applications 
in  a  client/server  environment; 
will  also  design,  implement  and 
maintain  various  programming 
and  operating  systems;  will 
work  independently  testing  and 
developing  software/systems 
applications  in  accordance  with 
project  specifications;  will  oversee 
systems  implementation  and 
prepare  project  status  reports 
and  formal  presentations  as 
required;  will  communicate  project 
specifications  effectively  with 
project  team.  Minimum  of  a 
Master’s  Degree  or  equivalent 
in  Computer  Science,  CIS, 
Engineering,  Mathematics, 
Electronics,  Business,  Management 
Technology  or  a  related  field 
required.  In  lieu  of  a  Master's 
Degree,  employer  is  willing  to 
accept  the  equivalent  to  a  U.S. 
Bachelor's  Degree  with  five  (5) 
years  of  prior  progressive 
professional  expenence  in  the 
position  offered  or  a  related 
position;  furthermore,  employer 
is  willing  to  accept  any  suitable 
combination  of  work  experience, 
education  and  training  that  is 
equivalent  to  the  actual  minimum 
requirements  of  the  position 
and  shows  demonstrable  ability  in 
the  required  skill  sets.  Position 
also  requires  extended  travel  and/ 
or  relocation.  No  prior  professional 
experience  necessary.  Attractive 
compensation  package.  Mail 
resumes  to:  American  Solutions, 
Inc.,  Job  #SE03,  100  Commerce 
Drive,  Suite  103,  Newark,  DE  19713. 


SOFTWARE  ENGINEER, 

Multiple  Openings  Job  located 
in  Newark,  Delaware  and  various 
unanticipated  client  sites 
throughout  the  United  States. 
Research,  design,  develop  and 
test  software/systems  applications 
in  a  client/server  environment; 
will  also  design,  implement  and 
maintain  various  programming 
and  operating  systems;  will 
work  in  a  team  environment 
testing  and  developing  software/ 
systems  applications  in  accordance 
with  project  specifications;  will 
also  work  under  the  close 
supervision  of  the  project  manager. 
Minimum  of  a  Bachelor's  Degree 
or  equivalent  in  Computer  Science, 
CIS,  Engineering,  Mathematics, 
Electronics,  Business,  Management 
Technology  or  a  related  field 
required;  position  also  requires 
extended  travel  and/or  relocation. 
One  (1)  year  prior  professional 
experience  in  software  design 
and  development  necessary. 
Attractive  compensation  package. 
Mail  resumes  to:  American 
Solutions,  Inc.,  Job  #SE01,  100 
Commerce  Drive,  Suite  103, 
Newark,  DE  19713. 


Computer  Professional 

Parsippany,  NJ.  Programmer 
Analysts,  Software  Engineers, 
Systems  Analysts,  Database 
Administrators  to  develop,  create 
and  modify  general  computer 
applications  software  or  specialized 
utility  programs.  Analyze  user 
needs  and  develop  software 
solutions.  Apply  to  HRD,  Shiva 
Software  Group,  1130  Rte  46W, 
Ste  8,  Parsippany,  NJ  07054. 


Computerworld 


SENIOR  SOFTWARE 
ENGINEER, 

Multiple  Openings.  Job  located 
in  Newark,  Delaware  and  various 
unanticipated  client  sites 
throughout  the  United  States. 
Research,  design,  develop  and 
test  software/systems  applications 
in  a  client/server  environment; 
will  also  design,  implement  and 
maintain  various  programming 
and  operating  systems;  will 
work  independently  testing  and 
developing  software/systems 
applications  in  accordance  with 
project  specifications;  will  oversee 
systems  implementation  and 
prepare  project  status  reports 
and  formal  presentations  as 
required;  will  communicate  project 
specifications  effectively  with 
project  team.  Minimum  of  a 
Master's  Degree  or  equivalent 
in  Computer  Science,  CIS, 
Engineering,  Mathematics, 
Electronics.  Business,  Management 
Technology  or  a  related  field 
required.  In  lieu  of  a  Master's 
Degree,  employer  is  willing  to 
accept  the  equivalent  to  a  U.S. 
Bachelor's  Degree  with  five  (5) 
years  of  prior  progressive 
professional  experience  in  the 
position  offered  or  a  related 
position;  furthermore,  employer 
is  willing  to  accept  any  suitable 
combination  of  work  experience, 
education  and  training  that  is 
equivalent  to  the  actual  minimum 
requirements  of  the  position 
and  shows  demonstrable  ability 
in  the  required  skill  sets. 
Position  also  requires  extended 
travel  and/or  relocation.  Five  (5) 
years  prior  professional 
experience  in  software  design 
and  development  necessary. 
Attractive  compensation  package. 
Mail  resumes  to:  American 
Solutions,  Inc.,  Job  #SE04,  100 
Commerce  Drive,  Suite  103, 
Newark.  DE  19713. 


IT  Professionals  Needed 
ea  Consulting,  Inc.,  an  established 
IT  consulting  company  in  Folsom, 
CA  is  searching  for  qualified  IT 
Professionals  (i.e..  Software 
Engineers,  Programmer/  Analysts, 
Systems  Analysts)  and  Information 
Systems  and  Project  Managers  for 
its  growing  team.  Technical  posi¬ 
tions  require  a  bachelor's  degree  in 
computer  science,  engineering  or  a 
related  field  and/or  relevant  industry 
experience.  For  our  Information 
Systems  and  Project  Manager 
positions  we  prefer  a  MS  degree  in 
related  fields  such  as  computer 
science  or  engineering  and  relevant 
industry  experience.  We  will  consid¬ 
er  applicants  with  a  relevant  bache¬ 
lor's  degree  and  significant  industry 
experience  for  these  positions. 
Some  positions  may  be  subject  to 
relocation  to  client  project  sites 
throughout  the  US.  Qualified  appli¬ 
cants  submit  resumes  to  HR 
Department,  ea  Consulting, 
Inc.,  1130  Iron  Point  Road, 
Suite  288,  Folsom,  CA  95630. 


It  Managers  for  (Exton)  PA  IT 
firm  to  plan,  direct,  Co-ordnte 
activi’s  in  electronic  data  pro¬ 
cessing,  inforin  sys,  sys  analysis, 
comp  progmng.  dsgn,  dvlpt  & 
testing  of  bus.  s/w  applic’n. 
Specific  exp.  in  working  w/  off¬ 
shore  clients/  projects.  Apply  w/2 
copies  of  resume  to  HRD,  Masters 
Information  Technology ,  Inc.  250 
Autumn  Dr.,  Exton,  PA  19341. 


-  July  10,  2006 


GATX  Corporation  is  seeking 
a  Senior  XI  Developer 
Analyze,  design,  program, 
and  test  integration  solutions 
based  on  business 
requirements.  Analyze 
business  requirements,  create 
technical  design  and  code 
specifications,  and  write 
codes  and  test  plans, 
configure  sender  and  receiver 
adapters  for  (File,  IDOC. 

RFC,  JDBC,  SOAP,  HTTP). 
Review  technical  designs  and 
codes,  as  well  as  participate 
in  the  upgrade  of  software, 
including  the  customization  of 
functionality  and  the 
performance  of  tests  to 
ensure  that  the  business  will 
not  be  impacted.  Perform 
SAP  -  XI  graphical  mapping 
for  basic  and  advanced 
functions.  Provide  support  to 
existing  systems,  including 
performing  maintenance  and 
fixing  production  problems 
Maintain  knowledge  of 
established  service  level 
agreements,  provide  support, 
and  participate  in  the 
implementation  of  processes 
designed  to  reduce  the 
number  of  support  issues  and 
improve  client  satisfaction. 
Qualifications  include  a 
BA/BS  degree  in  Computer 
Science  or  Information 
Services,  and  at  least  two 
years  of  experience  as  an 
SAP  Developer.  Must 
possess  experience  with 
SAP-XI  graphical  mapping  in 
both  basic  and  advanced 
functions  Must  be  able  to 
configure  SI  sender  and 
receiver  adapters  -  File. 

IDOC,  RFC,  JDBC,  SOAP, 
HTTP.  Must  possess 
experience  with  SLD,  SWCV, 
Integration  Repository,  and 
Integration  Directory. 

Qualified  candidates  should 
submit  a  cover  letter  and 
resume,  to  Jennie  Strable, 

C/O  GATX  Corporation.  500 
W  Monroe  Street,  Chicago, 
Illinois.  60661  Principals  only 
need  apply  GATX 
CORPORATION  IS  AN 
EQUAL  OPPORTUNITY 
EMPLOYER 


Programmer  Analyst  Responsible 
to  convert  specifications  and 
logical  flow-charts  into  computer 
programs  and  develop  application 
programs  for  ERP,  ECOM 
implementation  and  Legacy 
system  Integration.  Code  software 
programs  using  Microsoft  tech¬ 
nologies  on  Windows  Platforms. 
Programming  Front  and  Back-end 
using  .NET  Framework,  ASP.NET, 
VB.NET,  C#,  SQL  Server  2000, 
JavaScript,  Windows  2000. 
Requires  Bachelor's  degree  or 
for.  equiv.  +  5  years  programming 
experience.  Hands  on  knowledge 
of  .NET  Framework,  ASP.NET, 
C#,  COBOL  II,  VSAM,  Alpha  Server 
1200.  Send  resume  to  DeeBeCon, 
1  Tara  Blvd.  Suite  LL7,  Nashua, 
NH  03062.  Fax:  603-891-1452. 
Email:  jobs@deebecon.com. 


Researches,  designs  and  develops 
computer  software  systems  in 
conjunction  with  hardware  product 
development  for  commercial 
applications  applying  principles  and 
techniques  of  computer  science 
analysis.  Masters  degree  in  CS  or 
Engg.  or  math-related  and  2  yrs. 
exp.  in  job  offered  req'd.  Ab  Initio, 
EME,  Tivoli,  J2EE,  Teradata, 
Oracle,  DB2,  XML,  SAS,  Perl,  PHP 
and  Unix  scripts.  Must  be  able  to 
travel.  40  Hrs/wk.  9  to  5,  Monday 
thru  Friday,  no  overtime.  Apply  by 
resume  only  to  Nagesh  Ganta, 
HR  Manager,  Capricorn  Systems, 
Inc.  3569  Habersham-at  -Northlake, 
Building  K,  Tucker,  GA  30084. 


Chief  Architect 
St.  Louis,  Missouri 
Emerson  Electric  Co.  is  seeking 
a  Chief  Architect.  Oversee  all 
facets  of  Information  Technology 
Enterprise  architecture  within 
Emerson,  a  global,  multidivisional 
corporation,  including  the  design 
and  development  of  web  and 
eCommerce  applications,  Enterprise 
Resource  Planning  (ERP)  and 
Customer  Relationship  Management 
(CRM)  systems,  global  enterprise 
-wide  data  warehousing  and 
business  intelligence  applications 
(ETL  technologies,  portal  technologies, 
content  management  software), 
integration  frameworks  (adapters, 
messaging  and  message  brokers 
systems,  business  process 
management  platforms).  Provide 
direction  and  oversight  to  IT 
staff  at  Emerson  locations 
throughout  the  world.  Manage 
internal  and  external  IT  personnel 
in  connection  with  strategic  IT 
projects.  Review  and  analyze 
security  technologies  (remote 
access,  server  and  desktop 
configuration,  identity  management 
and  authentication  software, 
and  anti-virus  and  anti-spam 
software),  and  infrastructure 
strategies  and  solutions.  Design 
and  manage  IT  integration 
architecture.  Develop  and  maintain 
the  Emerson  metrics,  roadmaps, 
IT  standards  and  technology 
strategy  in  conjunction  with  the 
Group  and  Divisional  IT  architects. 
Define  the  Emerson  Architecture 
governance  model  and  the  creation 
of  the  Architecture  Review 
Board.  Undertake  detailed  technical 
evaluations  and  create  technical 
position  papers  to  support 
Emerson  business  needs. 
Participate,  on  the  Emerson  IT 
Board  to  set  the  overall  IT  strategy 
for  Emerson.  Manage  the 
Emerson  IT  Architecture  budget. 
Ensure  the  communication  of 
Emerson  IT  architecture  and 
standards  across  Emerson. 
Establish  and  oversee  Emerson 
Architecture  laboratories  /  centers 
that  will  provide  services  to 
business  projects  to  evaluate 
and  demonstrate  new  technologies 
and  applications.  Define  IT 
architecture  process  and 
methodology  and  ensure  the 
communication  of  architectural 
processes,  guidelines,  and 
documentation  to  IT  projects. 
Work  with  business  analysts,  IT 
operations,  and  IT  partners  to ! 
design  conceptual  solutions 
encompassing:  hardware,  networks, 
information,  applications,  services 
and  responsibilities.  Ensure  the 
smooth  transition  of  conceptual 
solutions  from  IT  architects  to  IT 
operations.  Travel  domestically 
and  overseas  40%  of  the  time 

Master's  degree  in  Computer 
Science  or  the  foreign  equivalent 
and  12  months  of  experience  as 
a  Chief  Architect.  The  12  months  of 
experience  must  have  been 
gained  with  a  global,  multi-divisional 
company  and  must  have  included 
design  and  development  of  web 
and  e-Commerce  applications, 
design  and  implementation  of  ERP 
systems,  global  enterprise-wide 
data  warehousing,  IT  integration 
architecture,  integration  frame¬ 
works,  and  IT  infrastructure 
strategies,  and  the  review  and 
analysis  of  security  technologies. 

Fax  your  resume  to  Emerson 
Electric  Co.  HR  at  (314)  553-1940  or 
email  to  emerson  1  .jobs@emrsn.com 

EOE 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Business  Case 


DEPARTMENT  OF  CORRECTIONS:  Two  weeks  ago,  writ¬ 
ing  about  a  CEO  who  only  cares  about  his  company’s 
stock  price,  I  said:  “Plenty  of  investors,  and  big  shots  like 
The  Conference  Board,  believe  that’s  all  he  should  care 
about.”  I  received  a  very  civil  note  from  someone  at  The 
Conference  Board  suggesting  that  his  organization  wasn’t  the  one  I 
should  have  mentioned. 

He  was  right.  It  was  the  Business  Roundtable  that,  in  1997,  declared 
that  the  CEO’s  only  job  is  to  maximize  shareholder  value. 

That  was  a  dumb,  sloppy  mistake.  I  should  have  caught  it,  and  I 
apologize  to  The  Conference  Board  for  misstating  its  position. 

Now  here’s  the  big  question:  Did  you  catch  it? 


If  you’re  like  most  IT  people,  probably  not. 
After  all,  one  big-deal  organization  for  CEOs 
sounds  pretty  much  like  another.  The  fact  that 
The  Conference  Board  is  the  research  outfit  that 
releases  the  Consumer  Confidence  Index  and 
other  economic  data,  while  the  Business  Round¬ 
table  is  a  lobbying  group,  goes  right  past  us. 

And  that’s  a  problem  if  we  want  to  be  able  to 
make  the  business  case  for  IT  successfully. 

We  don’t  have  to  think  like  CEOs  to  do  that. 

But  we  do  have  to  understand  what  executives 
and  senior  managers  are  thinking  about.  We 
have  to  know  the  right  buzzwords  to  say,  and 
the  right  buttons  to  push,  when  we  talk  to  them 
about  the  value  of  any  big  IT  project. 

We  have  to  understand,  at  least  a  little,  why 
The  Conference  Board  and  the  Business  Round¬ 
table  matter  to  those  business-side  bosses.  And 
if  cutting  head  count  or  increasing  sales  is  more 
important  to  them  this  year.  And  whether  they’re 
more  concerned  about  inventory  turnover  or  cost 
of  goods  sold.  And  how  fast  they  want  results. 

Put  bluntly,  before  IT  can  succeed  at  helping 
the  business  succeed,  we  have  to 
know  how  success  is  defined.  And 
that  means  we  have  to  get  smarter 
about  the  business  than  we  are. 

How  do  we  do  that? 

Oh,  we  could  do  it  the  hard  way: 

Get  a  proper  business  education, 
collect  our  MBAs,  do  thorough  case 
studies  of  the  company  and  the 
industry,  then  create  IT  and  busi¬ 
ness  strategies  that  will  maximize 
whatever  we  think  is  most  important 
to  the  business.  In  other  words,  we 
could  make  believe  we’re  CEOs. 

But  why  waste  all  that  time,  ex¬ 
pense  and  effort?  Our  actual  CEOs 


would  probably  come  up  with  different  strategies 
anyway.  And  their  strategies  change  as  business 
and  channels  and  products  change. 

Instead,  let’s  do  it  the  easy  way  and  just  ask. 
Not  the  CEO,  but  the  line-of-business  managers 
we  actually  collect  requirements  from.  Along 
with  determining  operational  requirements,  we 
can  also  ask  them  —  point-blank  —  what  it’s 
going  to  take  to  sell  the  project  to  management. 
What  buzzwords  we  need  to  comply  with.  What 
priorities  we  need  to  support.  What  worries  we 
need  to  offer  relief  for. 

Those  business-side  managers  should  know.  If 
they  don’t,  they  can  find  out  and  tell  us.  And  we’ll 
be  able  to  treat  those  buzzwords  and  priorities 
and  worries  as  real  requirements.  As  we  should 
—  because,  to  management,  they  are. 

If  we  don’t  understand  some  of  those  require¬ 
ments,  we  can  drill  down  with  the  managers  un¬ 
til  we  figure  them  out.  Think  of  it  as  just-enough, 
just-in-time  business  education. 

Then,  when  we  make  the  sales  pitch  to  the 
executive  sponsor,  we’ll  use  the  right  words  and 
hit  the  right  buttons.  We’ll  be  selling 
upper  management  exactly  what  it 
wants  to  hear. 

The  downside?  We  won’t  be  quite 
as  smart  as  we  appear  to  be.  We’ll 
know  just  enough  to  close  the  deal. 
Then  we’ll  have  to  work  that  much 
harder  to  make  sure  we  deliver  on 
our  sales  pitch. 

Yes,  it’s  a  little  tricky.  But  it’s 
an  opportunity  to  make  IT  look 
business-smart  and  get  the  green 
light  to  deliver  the  technology  the 
business  needs. 

And  letting  that  go  right  past  us 
would  be  the  biggest  mistake  of  all.  ► 


FRANK  HAYES,  Computer- 
world's  senior  news  columnist, 
has  covered  IT  for  more  than 
20  years.  Contact  him  at  frank. 
hayes@computerwaiid.com. 


No  Good  Deed  Goes  Unpunished 

This  Type  A  tech  is  blasting  his  way  through  80- 
hour  weeks  and  sprinting  toward  burnout,  says  a 
co-worker  pilot  fish  who  asks  him  about  it.  “He  had 
the  idea  that  he  would  get  those  hours  back,  like  a 
month’s  worth  of  extra  vacation  time,"  says  fish,  “i 
talked  with  my  managers  about  how  his  stress  was 
affecting  all  of  us  and  learned  that  in  fact  he  wouldn't 
be  getting  those  hours.  Ouch!  The  worst  part  was 
watching  him  over  the  next  few  days,  where  a  nor¬ 
mally  friendly  person  switched  to  being  extremely 
vile.  I  figure  they  finally  had  to  break  it  to  him  that  he 
was  working  extra  hard  essentially  for  nothing.” 


SHARK 

TANK* 


Nice  Work 

Computer  store 
pilot  fish  is 
called  in  after  a 
local  insurance 
company’s  network  is 
down  following  a  storm. 

“We  discovered  that  a 
surge  had  made  its  way 
through  the  network 
cable  and  fried  the 
network  cards  on  the 
PCs,”  says  fish.  “No 
problem:  We  replaced 
the  cards  and  voild!  the 
computers  were  com 
municating  again  on 
the  network.  Next  day,  i  The  Reason  Why 
was  disciplined  because  This  very  pleasant  de- 
I  had  ‘gone  over  my  partment  clerk  is  known 
manager’s  head’  by  for  having  very  strange 
fixing  the  bad  network  PC  problems.  “The  fix 
cards.  I  later  discovered  always  seemed  to  be 
that  a  whole  new  set  rebuilding  her  PC  from 


dow  that  he  left 
minimized  down 
on  the  task  bar. 

I  look  at  the 
contents  of  the 
browser  window  for  a 
few  moments  and  muse 
to  myself  that  before 
you  give  your  laptop  to 
the  guy  who’s  in  charge 
of  enforcing  corporate 
IT  usage  policies,  it 
might  be  a  good  idea  to 
close  the  window  full 
of  pom.  But  then  again, 
maybe  that’s  just  me.” 


of  PCs  was  ordered 
upon  recommendation 
by  my  manager  before 
we’d  even  evaluated  the 
problem.” 


Yeah,  It’s  Just  You 

User  can’t  connect  to 
the  wireless  network, 
so  he  brings  his  laptop 
to  this  support  pilot  fish 
for  troubleshooting,  “i 
monkey  around  a  bit 
with  the  Wi-Fi  settings 
until  it  looks  like  the 
connection  has  been 
established,”  says  fish. 
“Then,  to  test  it,  I  maxi¬ 
mize  the  browser  win- 


scratch,”  says  a  help 
desk  pilot  fish.  But  one 
day  the  clerk  casually 
mentions  that  she  tries 
to  speed  up  her  PC  by 
deleting  all  files  that  are 
more  than  two  years 
old.  “Her  reasoning  was 
that  something  that  old 
couldn’t  possibly  be 
of  any  use,”  sighs  fish. 
“What  followed  was  my 
futile  attempt  to  explain 
how  operating  systems 
work  and  why  deleting 
old  files  was  not  a  good 
idea.  But  at  least  we 
found  out  what  was  hap¬ 
pening  to  her  computer.' 


a 

I 
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OTELL  SHARKY  WHAT’S  HAPPENING.  Send  me  your 
true  tale  of  IT  life  at  sharky@computerworid.com. 
You’ll  snag  a  snazzy  Shark  shirt  if  I  use  it.  And  check  out 
Sharky’s  blog,  browse  the  Sharkives  and  sign  up  for  Shark 
Tank  home  delivery  at  computerworid.com/sharky. 


IBM  TotalStorage 


INTRODI  G 

FORWARD-LOOKING  BACKUP. 


As  your  business  changes  over  time,  you’ll  face  unforeseen  challenges.  Meet  them 
head-on  with  the  IBM  TS3100  Tape  Library  Express.  Highly  compatible,  it’s  designed 
to  support  a  wide  range  of  I.T.  server  environments  -  helping  you  prepare  for  whatever 
tomorrow  brings. 

With  IBM,  innovation  comes  standard.  In  fact,  IBM  has  been 
awarded  more  U.S.  patents  than  any  other  company  for  over 
13  years.  Because  we’re  always  looking  ahead. 

IBM  System  Storage™  TS3100  Tape  Library  Express 


High  density  and  high  performance  in  a  rack  environment. 


From 


$9,750 


IBM  Financing  Advantage  only  $264/month 


22  data  cartridge  capacity 

Ultrium™  3  tape  drive  supporting  up  to  400GB  of  data  on  a  single  cartridge 
(up  to  800GB  using  2:1  compression)2 

Read/write  compatible  with  media  written  by  Ultrium  2  drives;  read  compatible 
with  media  written  by  Ultrium  1  drives 
Remote  management  capability  and  bar  code  reader  standard 
Limited  warranty:  3  years  on-site3 


FINALLY,  A  CATALOG  THAT’S 
UP-TO-DATE. 

IBM  TotalStorage  SAN  16B-2  Express 

High-performance  fabric  switch  for  Windows? 

UNIX®  and  Linux® 

IBM  TotalStorage  DS4300  Express 

4.2TB  with  1  controller;  16.8TB  with  22 

Download  the  IBM  Express  Servers  and 
Storage ™  eCatalog.  You’ll  have  access  to 
the  latest  IBM  Express  products,  including 
the  most  up-to-date  specs,  prices  and 
promotions. 

Support  for  RAID  0/1/3/5/10 

1  or  2  Fibre  Channel  links  to  a  disk 
storage  array  or  an  LTO™  tape  drive 

512MB  cache 

Scales  to  33.6TB  of  Fibre  Channel  disk2 

8-port  solution  designed  to  support  up  to  7  servers 
with  a  single  path  to  disk  or  tape 

Limited  warranty:  3  years  on-site3 

Ports  on  Demand  feature:  allows  a  base  switch  to 
grow  to  16  ports 

From  $7,790* 

IBM  Financing  Advantage 

Oniy  $211/month’ 

ibm.com/ 

Limited  warranty:  1  year  CRU  (customer  replacement 
unit)  and  on-site3 

systems/  in  novate50 

1  866-872-3902 

mention  1Q4CE21A 

From  $3,170* 

IBM  Financing  Advantage 

Oniy  $86,  month1 

'All  prices  are  IBM's  estimated  retail  selling  prices  as  of  June  26, 2006.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are  subject  to  availability.  This  document  was  developed  for  offerings 
in  the  United  Stales.  IBM  may  not  otter  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  Pricers  subject  to  change  without  notice.  Contact  your  IBM  representative  or  IBM  Business  Partner  tor  the  most  current  pricing  in  your 
geography.  1  IBM  Globa!  Financing  offerings  are  provided  through  IBM  Credit  LLC  in  the  United  Stales  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and  government  customers.  Monthly  payments  provided  are  for  planning 
purposes  only  and  may  vary  based  on  your  credit  and  other  (actors.  Lease  otter  provided  is  based  on  a  FMV  lease  o!  36  monthly  payments.  Other  restrictions  may  apply.  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice. 
2.  GB=1.000,000,000  bytes  when  referring  to  storage  capacity.  Denotes  raw  storage  capacity.  Usable  storage  capacity  may  be  less  than  slated.  Capacity  staled  iri  uncompressed  mode  followed  by  capacity  using  data  compression  technology.  3.  IBM  hardware 
products  are  manufactured  from  new  parts,  or  new  and  serviceable  used  parts  Regardless,  our  warranty  terms  apply.  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely 
before  sendii  ig  a  tec!  inician.  On-site  warranty  is  available  only  for  selected  components.  IBM,  the  IBM  logo,  System  Storage,  TotalStorage  and  Express  Serveis  and  Storage  are  trademarks  or  registered  trademarks  ot  International  Business  Machines  Corporation 
in  ttie  United  States  and/or  other  countries.  LTO  and  Ultrium  are  trademarks  oHBM,  Hewlett-Packard  and  Quantum  in  the  United  States,  other  countries,  or  both.  Windows  is  a  trademark  ot  Microsoft  Corporation  in  the  United  Stales,  other  countries,  or  both. 
Linux  is  a  trademark  ot  Linus  Torvalds  in  the  United  Slates  and  other  countries,  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  ot 
others.  <&  2006  IBM  Corporation.  All  rights  reserved. 
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Microsoft  Shifts 
ODF  Stance 

Backs  effort  for  free  plug-ins  to  save 
Office  files  in  the  open-source  format 
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BY  ERIC  LAI 

In  a  tacit  acknowledgment  of 
the  OpenDocument  format’s 
increased  momentum,  Micro¬ 
soft  Corp.  said  last  week  that  it 
will  back  an  open-source  proj¬ 
ect  to  create  software  that  will 
allow  Microsoft  Office  users  to 
open  and  save  files  in  ODF. 

The  project,  hosted  on 
SourceForge.net,  is  being  led 
by  three  independent  soft¬ 
ware  vendors  that  are  receiv¬ 
ing  funding  from  Microsoft 
and  is  open  to  all  developers, 
said  Tom  Robertson,  general 
manager  for  standards  and  in¬ 


teroperability  at  Microsoft. 

The  goal  is  to  develop  free 
plug-ins  that  allow  users  to 
natively  save  Word,  Excel  and 
PowerPoint  files  in  ODF,  as 
well  as  convert  files  in  Office 
2007’s  OpenXML  format  to 
ODF  and  back. 

“XML  is  good,  standardized 
XML  is  good,  and  choice  is 
good.  This  is  an  interesting 
announcement,”  said  Louis 
Gutierrez,  CIO  for  the  Mas¬ 
sachusetts  state  government. 
Last  September,  Massachu¬ 
setts  announced  plans  to  be- 
Microsoft  ODF,  page  45 


Microsoft  is  working  to  quell  criticism  of 
its  Software  Asset  Management  program, 
which  has  left  some  users  confused,  dis¬ 
trustful  or  downright  angry.  Some  custom¬ 
ers  complain  that  Microsoft  has  charged 
them  with  posable  license  violations  as  part 
of  a  pitch  to  get  them  to  join  the  program. 
Carol  Sliwa  reports  < 


CIO  DALE  FRANTZ 

sought  detailed  rec¬ 
ords  from  Microsoft. 
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igns 

Early  warning:  Many  IT  managers 
are  finding  that  it’s  getting  tougher 
to  recruit  and  retain  key  IT  talent, 
according  to  our  new  quarterly 
survey  on  the  health  of  IT.  PAGE  35 

NOAH  A.  BROADWATER  (left)  of  Sesame  Workshop 
has  lost  workers  to  higher-paying  jobs. 

Budget  Crisis  Tests  N.  J.  IT  Operations 


Gov’t  shutdown  shows  technology  is  the 
‘umbilical  cord’  for  state  services,  says  CTO 


BY  PATRICK  THIBODEAU 

Many  IT  managers  have  de¬ 
veloped  contingency  plans  for 
dealing  with  drastic  personnel 
absenteeism  due  to  an  emer¬ 
gency,  such  as  a  pandemic. 

But  Adel  Ebeid,  New 
Jersey’s  chief  technology  of¬ 
ficer,  last  week  had  to  manage 
a  man-made  crisis  when  an 
impasse  over  the  state  budget 
led  to  a  government  shutdown 
that  forced  him  to  reduce  his 
staff  to  a  tenth  of  its  normal 
level  and  turn  to  contingency 
plans  designed  for  service 
disruptions. 

The  shutdown,  which  began 
July  3,  forced  the  New  Jersey 
Office  of  Information  Tech¬ 
nology  to  temporarily  cut  its 
staff  from  930  to  80  employees, 
including  a  limited  number  of 


application  developers.  Those 
employees  had  to  handle  es¬ 
sential  IT  functions,  such  as 
operating  data  centers  and 
maintaining  network  and 
Internet  services. 

“Unfortunately,  at  a  time 
like  this,  IT  really  doesn’t  shut 
down.  If  anything,  IT  really 
steps  up  quite  a  bit,”  Ebeid 
said.  “This  has  been  an  excel¬ 
lent  lesson  statewide  on  how 
IT  actually  proved  to  be  sort  of 
the  umbilical  cord  for  govern¬ 
ment  operations.” 

Lawmakers 
reached  a  budget 
agreement  late 
Thursday,  ending 
the  shutdown.  It 
was  not  known  at 
press  time  when 
all  the  workers 


would  return  to  their  jobs. 

Teri  Takai,  CIO  of  the 
Michigan  Department  of  In¬ 
formation  Technology,  said 
that  anytime  a  state  has  a 
crisis,  “we  always  learn  a  lot 
about  what  constitutes  criti¬ 
cal  IT  services.”  Takai  had 
such  an  experience  during  the 
2003  blackout  that  cut  power 
for  some  50  million  people, 
from  Michigan  to  New  Eng¬ 
land.  Now  New  Jersey’s  IT 
department  “will  definitely 
get  some  good  feedback  on 
what  constitutes  critical  ser¬ 
vices,”  she  said. 

Ebeid  said  his 
major  concern 
has  been  to 
keep  the  WAN 
running  and  to 
ensure  the  qual¬ 
ity  of  e-maii  and 
Internet  services. 
NJ.  IT,  page  45 
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Microsoft  Exec  Downplays  Compliance 


FRAMINGHAM,  MASS. 

When  Microsoft’s  Juan  Fernando  Rivera  visited 
Computerworld  late  last  month,  his  title  was 
director  of  worldwide  license  compliance.  Rivera 
now  identifies  himself  as  the  worldwide  director 
of  software  asset  management,  or  SAM.  In  an 
ironic  twist,  Rivera  is  now  adamant  that  SAM  is 
not  about  license  compliance,  contending  that 
“compliance  is  a  byproduct  of  software  asset 
management."  Rivera  discussed  the  role  of  SAM 
in  an  interview  with  Computerworld. 


pretty  transparent  about  what  we  do. 

Did  you  sign  off  on  the  script  that  the  U.S.- 
based  SAM  force  seems  to  work  off  -  let¬ 
ters  that  bear  striking  resemblance  to  one 
another  and  sometimes  escalate  with  a  tone 
that  some  customers  perceive  as  threaten¬ 
ing?  No.  That’s  part  of  the  autonomy  that  they 
have  in  terms  of  how  they  define  the  processes. 
We  give  them  general  guidance  on  that,  and  if 
the  script  calls  to  be  revised,  we  should  spend 
the  time  and  revise  it. 

Is  the  script  being  revised?  We  spend  a  lot  of  time 
educating  our  internJleople  as  well.  Software  asset 
management,  even  internally  at  Microsoft,  is  hard  to  dis¬ 
cuss  because  some  people  don’t  get  it,  in  terms  of  being 
yepdflr-agnostic,  not  being  about  Microsoft,  not  being 
about  auditsr-Httft  why  we  call  it  something  different. 

We  call  it  SAM  reviews.  It's  not  an  audit.  Even  internally, 
some  of  the  executives  still  keem^Bo  that  as  au¬ 
dits.  I've  been  in  pl^ty  of  meetings  with  VPs  where  they 
say  “audits”  and  I  have  to  stand  up  and  say,  “Excuse  me, 
they  are  not  audits.” 

Isn’t  it  still  an  audit  of  sorts,  without  the  hammer  at 
the  end?  Yeah,  it  doesn’t  have  fines.  It  doesn’t  have  pen¬ 
alties.  Maybe  it  tends  to  sound  like  that. 

Is  there  anything  being  done  to  change  some  of  these 
processes?  We’re  revising  processes  internally.  We  have 
spent  time  talking  with  different  people,  educating  them 
on  what  we  are  doing  ancMur  goals  around  software  as¬ 
set  management. 

Is  the  program  really  about  creating  an  upselling 
opportunity  using  the  databases  of  information 
gained  through  SAM  reviews?  It's  not  about  forcing  the 
customer  into  buying  something  new.  It’s  not  about  the 
customer  moving  into  a  different  scheme.  It’s  about  the 
benefits  to  the  customer.  If  a  customer  can  save  money 
getting  to  a  volume  license  agreement  versus  buying  full- 
packaged  product,  that  would  be  a  recommendation.  But 
it’s  our  recommendation.  It’s  not  about  selling. 

-  CAROL  SLIWA 


How  do  you  decide  which  customers  to  contact 
about  participating  in  the  SAM  program?  It  changes 
depending  on  the  marketplace.  Germany  is  a  more 
mature  marketplace  ard|nd  software  asset  management. 
[Customers  and  partners  there]  talk  about  software  asset  J 
management,  and  they  decide  on  their  engagement. 

For  the  customers  that  Microsoft  engaged  directly, 
we  do  some  data  mining.  If  you  look  at  companies,  for 
example,  that  have  a  volume  license  purchase  history  t 
of  300  units,  yet  under  public  records  they  have  1,000 
desktops,  we  tend  to  think  it  might  be  a  possibility  for 
that  customer  to  be  out  of  control  in  terms  of  thf licenses’  ■ 
coverage.  So  we  want  to  have  a  conversation  with  them 
around  software  asset  management. 

Couldn’t  a  customer  get  confused  when  compliance 
is  mentioned  in  the  initial  e-mail  to  them?  Right. 
Probably  we  need  to  revise  that.  But  it's  part  of  the  whole  ; 
education  that  we  have  to  do  in  the  field  as  well  around 
what  SAM  is  and  how  to  educate  on  SAM. 

Isn’t  it  possible  that  an  honest  person  might  get  upset 
by  this  approach?  Yeah,  the  possibility  of  that  happening 
does  exist.  Allpm  not  going  to  deny  that.  But  the  records 
that  we  have  are  very  limited.  It’s  just  limited  to  [volume 
agreement]  purchases.  That’s  why  we  want  to  sit  down 
with  the  customer  and  have  a  conversation  with  them. 

We’re  assuming  positive  intent  on  the  customer’s  part. 

When  you  target  a  customer  whomay  really  be  in  com¬ 
pliance,  don’t  you  risk  losing  that  customer?  That  could 
happen.  [And]  yes  it’s  risky.  But  that’s  why  I  want  to  have  an 
open  conversation  with  the  customer.  And  that’s  why  we’re 


ments,  the  third  parties  have  a 
chance  to  sell  their  consulting 
services  or  tools. 

“It’s  a  great  deal  for  the 
consulting  company.  We  can’t 
understand  why  any  partner 
would  turn  down  the  oppor¬ 
tunity  to  do  this,”  said  David 
Burns,  a  principal  at  Universal 
Management  Solutions  in 
Sammamish,  Wash. 

Burns  estimated  that  20%  of 
his  company’s  more  than  100 
SAM  engagements  have  led  to 
sales  of  either  consulting  ser¬ 
vices  or  its  license  inventory 
and  management  tool,  called 
licenselTall. 

Benefits  to  Microsoft 

And  the  future  revenue  oppor¬ 
tunity  doesn’t  stop  with  the 
partners.  Once  the  consultant 
has  assessed  a  customer’s 
license  situation,  it  makes  rec¬ 
ommendations  about  volume¬ 
licensing  options  that  could  be 
more  beneficial  to  customers. 
Those  recommendations  also 
happen  to  benefit  Microsoft 
whenever  the  customer  elects 
to  upgrade  its  licensing  status 

—  especially  to  an  Enterprise 
Agreement  (EA). 

The  EA  is  typically  the  most 
lucrative  volume-licensing 
deal  for  Microsoft  because  a 
customer  must  commit  to  run 
a  standardized  package  of  its 
software  on  every  desktop 
PC.  In  return,  the  company 
receives  better  pricing  and  the 
rights  to  all  covered  products 
released  during  the  three-year 
contract  time  frame,  as  well  as 
training  and  support  benefits. 

But  Rivera  maintained  that 
“SAM  is  not  about  selling.”  He 
said  customers  are  not  forced 
to  accept  the  recommenda¬ 
tions  made  by  partners  or 
Microsoft,  and  overlicensed 
customers  might  even  be  ad¬ 
vised  to  downgrade. 

“It’s  not  about  squeezing  the 
customer  and  trying  to  get  as 
much  money  as  possible  from 
them,”  Rivera  said. 

“It’s  about  the  benefits  to  the 
customer,”  he  professed. 

Both  of  the  SAM  reference 
accounts  that  Microsoft  sup¬ 
plied  to  Computerworld  wound 
up  signing  deals  for  EAs  after 
their  consulting  engagements 

—  despite  failing  to  meet  the 
eligibility  requirements  for  the 


program.  To  qualify  for  an  EA, 
a  company  must  have  250  or 
more  desktop  PCs. 

Lovitt  &  Touche  Inc.  had 
about  220  employees  at  the 
time  of  its  SAM  engagement 
and  took  up  a  recommenda¬ 
tion  to  move  up  to  an  EA, 
according  to  Ian  Crawford, 
manager  of  IT  at  the  Tucson, 
Ariz.-based  insurance  agency. 

Another  Microsoft  refer¬ 
ence  account,  a  software  de¬ 
velopment  company,  had  only 
174  clients  at  the  time  of  its 
SAM  engagement,  according 
to  an  IT  project  manager  at 
the  company. 

But  the  company  agreed 
to  pay  for  the  full  250  clients 
after  Microsoft  came  through 
with  training  and  service  in¬ 
centives,  the  IT  manager  said. 
In  one  fell  swoop,  the  company 
was  able  to  clear  up  license- 
compliance  woes  that  had  re¬ 
sulted  from  its  2004  sale  to  an¬ 
other  company,  pave  the  way 
for  expected  growth,  reduce 
the  financial  hit  by  spreading 
payments  over  three  years  and 
ease  the  burden  of  software 
tracking  for  its  four-person  IT 
staff,  the  manager  added. 

Since  EAs  cover  all  desktop 
PCs,  each  running  a  standard 
set  of  Microsoft  software, 
there’s  no  need  to  figure  out 
who’s  running  what.  Compa¬ 
nies  true  up  once  a  year  based 
on  PC  count. 

While  that  benefits  EA  hold¬ 
ers,  it  also  opens  the  door  for 
high-pressure  sales  tactics.  Al¬ 
vin  Park,  an  analyst  at  Gartner 
Inc.,  noted  that  for  the  past  five 
years  clients  have  complained 
about  Microsoft  sales  represen¬ 
tatives  mentioning  potential 
license-compliance  problems 
and  then  telling  them  that  “an 
Enterprise  Agreement  will 
make  that  go  away.” 

Whether  Microsoft  in¬ 
tended  it  or  not,  Park  said, 
some  clients  felt  they  were 
being  threatened  with  an 
audit.  When  he  reported  the 
incidents,  Microsoft  claimed 
that  it  didn’t  engage  in  such 
practices  and  v/ould  fix  the 
problem,  Park  said.  But  he  not¬ 
ed  that  he  still  hears  monthly 
from  at  least  two  clients  “who 
think  they’re  being  manipulat¬ 
ed  into  signing  an  agreement 
they  wouldn’t  otherwise  sign 


because  they  know  they’ve 
got  some  software  compliance 
problems.” 

Libenson  vowed  that  will 
not  happen  at  Ingersoll-Rand, 
even  though  he  has  had 
numerous  conversations  in 
which  Microsoft  has  claimed 
an  EA  would  be  “the  solu¬ 
tion  for  everything.”  He  said 
that  given  Microsoft’s  trouble 
meeting  scheduled  product- 
release  dates,  the  EA  would 
become  beneficial  only  if  his 
company  needed  “voluminous 
amounts”  of  support  from  Mi¬ 


crosoft.  That’s  not  the  case,  he 
added. 

So  Ingersoll-Rand  decided 
that  it  would  be  more  cost- 
effective  to  true  up  under 
its  existing  select  volume¬ 
licensing  agreements.  The 
company  cut  a  check  for  near¬ 
ly  $250,000  to  cover  its  Office 
deficiencies  and  is  currently 
figuring  out  the  payment  due 
for  SQL  Server  client-access 
licenses,  although  its  exposure 
may  be  less  than  Microsoft 
thinks,  because  it’s  primarily 
an  Oracle  shop,  Libenson  said. 


But  that  true  up  isn’t  hap¬ 
pening  because  of  any  third- 
party  SAM  review.  Libenson 
told  Microsoft  that  his  own  IT 
department  would  determine 
if  the  company  was  out  of 
compliance,  on  its  own  time 
frame,  using  the  Symantec 
Corp.  Discovery  tool  that  it 
bought  for  about  $200,000. 

“Microsoft’s  a  great  software 
company,  but  when  it  comes  to 
sales,  they’re  severely  lacking,” 
said  Libenson.  “They  just  don’t 
know  how  to  do  business  with 
Fortune  500  companies.”  * 
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PURE  INSIGHT  TO  SYSTEM  STATUS 

NEW  DELL  POWEREDGE  SERVERS  WITH  BUILT-IN  LCD  DISPLAYS. 


Introducing  the  new  PowerEdge  family.  It  was  born  to  reduce  complexity.  System 
status  is  available  at  a  glance,  allowing  you  to  diagnose,  maintain  and  conquer 
datacenter  chaos  like  never  before.  For  a  360°  online  view  of  this  pure  leap 
forward,  visit  www.dell.com/poweredge.  Streamline  without  sacrifice.  That's  the 
direct  path  to  success.  That's  pure  Dell. 
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AT  DEADLINE 


Microsoft  to  Patch 
Windows  and  Office 

Microsoft  Corp.  plans  to  release 
seven  software  patches  tomor¬ 
row  as  part  of  its  regularly 
scheduled  monthly  patch  update. 
Four  of  the  updates  will  fix  bugs 
in  Windows,  while  three  of  them 
will  address  flaws  in  Microsoft 
Office.  Both  sets  of  patches  will 
address  critical  flaws,  which 
attackers  could  exploit  to  run 
unauthorized  code  on  a  PC  with¬ 
out  any  user  action. 


AMD  Cuts  Sales 
Forecast  for  Q2 

Citing  lower-than-anticipated 
sales  of  iaptop  and  desktop  PC 
microprocessors,  Advanced 
Micro  Devices  Inc.  has  lowered 
its  second-quarter  sales  forecast. 
The  company  cut  its  sales  fore¬ 
cast  for  the  quarter  by  about 
9%  to  $1,215  billion.  AMD’s 
second  quarter  ended  July  2, 
and  the  company  will  formally 
report  its  earnings  results  on 
July  20. 


IBM  to  Ship  Linux 
Client  for  Notes 

IBM’s  Lotus  unit  is  set  to  start 
shipping  its  first  Linux  client  for 
Lotus  Notes,  starting  July  24. 
The  new  release,  a  free  down¬ 
load  for  licensed  Notes  7.01 
users,  was  built  using  the 
Eclipse  development  environ¬ 
ment.  It  will  work  with  any  major 
Linux  distribution,  according  to 
IBM.  Lotus  will  support  versions 
running  on  specific  versions  of 
Red  Hat  Enterprise  and  SUSE 
Linux.  The  Linux  client  has  been 
tested  by  5,000  internal  IBM 
users  for  about  a  year. 


Csss©  Buys  Security 
Software  Firm 

Cisco  Systems  Inc.  has  agreed 
tc  buy  Meetinghouse  Inc.,  an 
endpoint  security  software 
maker,  for  $43.7  million.  Meet¬ 
inghouse's  Aegis  line  of  authenti¬ 
cation  software  heips  to  manage 
network  access  using  the  IEEE 
802.1x  standard.  The  move  is 
part  of  a  Cisco  effort  to  integrate 
security  management  software 
into  its  hardware. 
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NEWS  AND  INDUSTRY  BUZZ  BY  MARK  HALL 


...  of  your  workers,  managers  and  partners.  If  you’re 
like  most  people,  you’re  not  perfect.  But  some  people 
are  even  less  perfect  than  you,  and  your  company 
probably  needs  to  know  more  about  how  employees’ 
imperfections  can  put  it  at  risk.  That’s  the  premise 
behind  the  Enterprise  Incident  Manager  (EIM) 


software  as  a  service 
(SaaS)  from  EthicsPoint 
Inc.  in  Portland,  Ore. 

CEO  David  Childers 
explains  that  EIM  is 
a  centralized  reposi¬ 
tory  of  company-spe¬ 
cific  ethical  advice  and 
miscues.  For  example, 
with  EIM,  workers  can 
learn  whether  a  gratu¬ 
ity  offered  by  a  supplier  is  an 
acceptable  gift  or  a  hidden 
bribe,  according  to  your  poli¬ 
cies.  Also,  EIM  includes  a  hot 
line  that  employees  can  use 
to  anonymously  reveal  ques¬ 
tionable  behavior  —  anything 
from  sexual  harassment  to 
theft  —  inside  your  company. 
Childers  says  that  by  central¬ 
izing  a  company’s  ethical 
information,  executives  can 
learn  whether  ethical  lapses 
are  repeatedly  occurring  in  a 
given  region  or  in  a  specific 
manager’s  office.  He  says  the 
data,  which  is  encrypted  in 
EIM,  is  generally  consolidated 
from  departments  such  as  hu- 


CHILDERS: 
Track  behavio 
minimize 
risk, 


man  resources,  legal 
and  security.  Access  is 
role-based. 

In  the  third  quarter, 
the  company  plans  to 
add  specific  modules 
to  EIM  to  oversee 
workers’  compensation 
claims,  including  vari¬ 
ables  such  as  where 
claims  happen  and 
how  often.  Annual  subscrip¬ 
tions  are  $20,000,  plus  a  per- 
seat  cost  for  end-user  access. 

SAN,  NAS  worlds 
get  continuous . . . 

. . .  data-processing  updates. 

Whether  you  run  a  storage- 
area  network  or  a  network- 
attached  stor¬ 
age  environ¬ 
ment,  manag¬ 
ing  the  data 
archive  can  be 
a  burden  when 
you  need  to 
recover  an 
application  to 
a  particular 


BURGENER: 
Move  beyond 
CDP. 


point  in  time. 

Rami  Schwartz,  CEO  of 
Exanet  Inc.  in  New  York, 
says  his  NAS  tool  targets 
organizations  with  big  stor¬ 
age  needs,  especially  those 
with  “somewhere  north  of 
30TB.”  His  ExaStore  product, 
which  includes  a  full  NAS 
file  system  and  backup  tools, 
takes  snapshots  of  your  stor¬ 
age  changes  every  30  seconds, 
so  you  can  return  to  a  data 
condition  to  within  less  than 
a  minute  of  your  needs. 

Eric  Burgener,  vice  presi¬ 
dent  of  marketing  at  Mendoci¬ 
no  Software  Inc.  in  Fremont, 
Calif.,  argues  that  applications 
like  his  firm’s  RecoveryOne 
go  beyond  continuous  data 
protection  (CDP)  and  should 
be  labeled  “continuous  data 
technologies”  (CDT)  because 
you  can  do  more  than  just  re¬ 
cover  your  data  to  a  past  con¬ 
dition.  Burgener  says  CDT  is 
broader  because  you  can  use  it 
to  validate  a  new  app  by  using 
“live”  production  data  from 
one  of  the  images  Recovery- 
One  makes  of  your  SAN.  He 
adds  that  you  can  also  update 
your  data  warehouse  more 
frequently.  “This  is  more  than 
CDP,”  which  he  contends  is 
primarily  a  backup  and  recov¬ 
ery  concept. 

In  the  third  quarter, 
Mendocino  plans  to  update 
RecoveryOne  to  handle 
application-specific  needs, 
such  as  recovering  Microsoft 
Exchange  to  the  mailbox  level. 

Partial  SaaS 
approach  yields . . . 

...  a  complete  IT  monitoring 
service.  James  Maiocco  is  a 
big  believer  in  SaaS.  But  the 
CEO  of  Klir  Technologies 
Inc.  in  Seattle  offers  a  twist 
to  the  fast-growing  move¬ 
ment  for  delivering  software 
to  people’s  desktops:  It  puts 
software  on  your  network 
too.  Here’s  how  it  works:  Klir 
Analytics,  which  starts  as  a 
$108-per-month  service,  gives 
IT  pros  metrics  on  applica¬ 
tion  performance,  bandwidth 


availability, 
system  per¬ 
formance  and 
more,  using 
data  gath¬ 
ered  by  Klir 
software  run¬ 
ning  on  your 
network.  The  gathering  tool 
packages  the  data,  encrypts 
it  and  then  sends  it  to  the  Klir 
data  center,  where  the  analyt¬ 
ics  are  crunched  and  reported 
back  to  IT  users’  role-based 
dashboards,  says  Maiocco.  He 
says  the  software  will  run  on 
any  off-the-shelf  Windows  32 
machine.  Later  this  quarter, 
Klir  will  release  its  applica¬ 
tion  programming  interface 
and  begin  to  monitor  “special- 
device  protocols,”  such  as 
those  used  by  MRI  machines. 

Get  control  of 
your  Office . . . 

. . .  docs  to  avoid  “the  smoking- 
gun  document  problem.”  That’s 
the  advice  from  Darren  Lee, 
CEO  of  NextPage  Inc.  in 
Draper,  Utah.  Billions  of  Excel, 
Word,  PowerPoint  and  other 
Microsoft  Office  files  clutter 
the  world’s  disk  drives  annu¬ 
ally.  Lee  estimates  25%  to  30% 
of  your  share  of  those  files  is 
vital  enough 
to  be  managed 
and  stored 
centrally  to 
avoid  sur¬ 
prises  —  that 
smoking  gun 
—  should  they 
become  fod¬ 
der  for  litiga¬ 
tion.  Lee  says  a  big  part  of  the 
problem  is  that  end  users  pass 
around  confidential  files  like 
candy.  With  Version  2.0  of 
NextPage’s  eponymous  soft¬ 
ware,  due  for  general  release 
in  the  fourth  quarter,  you  can 
set  policies  for  any  document 
that  needs  to  be  automatically 
stored  in  a  central  reposi¬ 
tory.  The  NextPage  tool  also 
knows  when  to  delete  sensi¬ 
tive  files  anywhere  on  your 
network.  Pricing  starts  at 
$100  per  user  per  year.  * 


Tower 
Group’s 
estimate  of 
the  number 
of  Office  files 
created 
each  year. 


India’s 
SaaS  market 
in  2008,  says 
Springboard 
Research. 


Keep  Tabs  on 
The  Ethics . . . 
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Visa,  MasterCard  Unveil 
New  Security  Rules 


Updated  PCI  standard  will  cover  Web 
applications  and  third-party  controls 


Credit  Card 
Data  Security 


SI m 


Mercury  Officials 
Face  Charges 

Mercury  Interactive  Corp. 
announced  that  it  has  restated 
its  earnings  for  2002  to  2004 
and  disclosed  that  three  board 
members  are  facing  possible 
civil  enforcement  proceedings. 
Mercury  refried  financial  state¬ 
ments  for  its  fiscal  2002, 2003 
and  2004  years.  It  also  said  that 
the  board  members  -  Igal  Kohavi, 
Yair  Shamir  and  Giora  Yaron  - 
face  charges  in  connection  with 
an  accounting  scandal  that  hit 
the  company  last  year. 


Microsoft  Faces 
Lawsuits  Over  WGA 

Microsoft  Corp.  has  been  hit  with 
a  second  lawsuit  over  Windows 
Genuine  Advantage,  its  antipiracy 
program  that  checks  whether 
the  Windows  operating  system 
on  a  machine  has  a  valid  license. 
The  class-action  suit,  filed  in  U.S. 
District  Court  in  Seattle,  alleges 
that  WGA  is  spyware  and  that 
Microsoft  misleads  consumers 
by  labeling  it  as  a  critical  secu¬ 
rity  update.  The  suit  maintains 
that  WGA  frequently  contacts 
Microsoft’s  central  servers. 
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Oracle  reports  $2B 
In  Asian  Revenue 

Oracle  Corp.’s  Asian  revenue 
topped  $2  billion  for  the  first 
time  during  its  most  recent  fiscal 
year.  The  software  vendor  said 
revenue  from  the  Asia-Pacific 
region,  including  Japan,  totaled 
S2.G2  billion  during  the  com¬ 
pany’s  2006  fiscal  year,  which 
ended  May  31,  up  18%  over  the 
previous  fiscal  year. 
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Microsoft  Barnes 
EMEk  Executive 

Microsoft  last  week  promoted 
the  head  of  its  Dutch  subsidiary 
to  vice  president  for  the  public 
sector  for  Europe,  the  Middle 
East  and  Africa  (EMEA).  Michel 
van  der  Sel  replaces  Jan  Muehi- 
feit,  who  was  earlier  named 
EftsEA  vice  president  for  corpo¬ 
rate  and  government  strategy. 
Van  tie;  Bel  reports  to  Gerri  El¬ 
liott,  corporate  vice  president  for 
worldwide  public  sector. 


BY  JAIKUMAR  VIJAYAN 

ISA  U.S.A.  INC.  and 
MasterCard  Inter¬ 
national  Inc.  will 
release  new  secu¬ 
rity  rules  in  the  next  30  to  60 
days  for  all  organizations  that 
handle  credit  card  data,  a  Visa 
official  said  last  week. 

The  rules  will  be  the  first 
major  update  to  the  one-year- 
old  Payment  Card  Industry 
data  security  standard,  which 
analysts  said  is  slowly  but 
surely  being  adopted. 

One  set  of  PCI  extensions 
is  aimed  at  protecting  credit 
card  data  from  emerging  Web 
application  security  threats, 
said  Eduardo  Perez,  vice 
president  of  corporate  risk 
and  compliance  at  Foster  City, 
Calif.-based  Visa.  Other  new 
rules  will  require  companies 
to  ensure  that  any  third  par¬ 
ties  that  they  deal  with,  such 
as  hosting  providers,  have 


proper  controls  for  securing 
credit  card  data. 

PCI  became  a  universal 
requirement  on  June  30, 2005, 
for  all  entities  handling  credit 
card  data.  Merchants  who  fail 
to  comply  with  PCI  can  face 
fines  or  be  excluded  from  proc¬ 
essing  credit  cards. 

The  standard  lists  12  broad 
controls  that  retailers,  online 
merchants,  data  processors 
and  other  businesses  must  im¬ 
plement  to  protect  cardholder 
data.  They  include  technology 
controls  such  as  data  encryp¬ 
tion,  end-user  access  control 
and  activity  monitoring,  as 
well  as  procedural  mandates. 

Most  existing  PCI  require¬ 
ments  focus  on  security  at  the 
network  level,  but  many  of 
the  latest  threats  are  on  the 
application  side,  said  Philippe 
Courtot,  CEO  of  Qualys  Inc.,  a 
Redwood  Shores,  Calif. -based 
provider  of  managed  security 


Credit  Card 
Data  Security 

Proposed  updates  to  the 
Payment  Card  Industry 
data  security  standard: 

■  Guidelines  for  Web 
application  security. 

■  Rules  for  ensuring  that  third 
parties  protect  cardholder  data. 

■  Rules  requiring  companies  to 
keep  track  of  credit  card  data 
that  they  send  to  or  receive  from 
third  parties. 

■  A  plan  to  make  payment  appli¬ 
cation  best  practices  mandatory 
in  about  two  years. 

SOURCE:  VISA  U.S.A. 

services.  So  it  makes  sense  to 
update  PCI  to  protect  against 
Web  application  threats  such 
as  SQL  injection  attacks,  cross¬ 
site  scripting  flaws,  error¬ 
handling  problems  and  valida¬ 
tion  errors,  he  said. 

The  PCI  standard  could  be¬ 
come  stricter  in  the  next  few 
years.  Currently,  companies 
are  encouraged,  but  aren’t 
required,  to  use  payment  ap- 


into  processes  running  on  sys¬ 
tems  such  as  its  IBM  CICS. 

“We’re  at  a  place  where  we 
have  to  make  decisions  on  lega¬ 
cy  systems,”  he  said.  “We  don’t 
want  to  get  rid  of  them.  [With 
the  new  software],  we  can  live 
with  some  of  our  legacy  sys¬ 
tems  longer . . .  and  still  be  able 
to  integrate  them  into  other  op¬ 
erations  of  the  organization.” 

Gaining  Visibility 

The  city  has  put  off  some 
projects  that  require  the 
closed-loop  management  of 
human-centric  and  system- 
based  processes  because  it 
has  lacked  an  easy  way  to  gain 
the  visibility  into  processes 
on  legacy  and  other  back-end 
systems,  ClufF  added. 

“If  we  can  now  have  that 
window  into  those  systems 
more  easily,  that  will  help  us,” 
he  said. 


plications  that  meet  a  set  of 
payment  application  best- 
practices  standards,  but  that 
will  become  compulsory  over 
the  next  two  years,  Perez  said. 

The  number  of  companies 
complying  with  PCI  require¬ 
ments  finally  appears  to  be 
picking  up  after  a  slow  start, 
several  analysts  said.  Visa 
says  that  about  22%  of  Tier  1 
merchants,  which  the  com¬ 
pany  defines  as  those  process¬ 
ing  more  than  6  million  card 
transactions  per  month,  are 
already  PCI-compliant,  with 
another  72%  on  track  to  be¬ 
coming  fully  compliant. 

The  numbers  reveal  that 
progress  is  being  made,  albeit 
slowly,  said  Avivah  Litan,  a 
Gartner  Inc.  analyst.  One  of 
the  biggest  technology  chal¬ 
lenges  is  PCI’s  requirement  for 
encryption,  Litan  said.  Some 
companies  are  uncertain 
whether  they  are  required  to 
encrypt  data  or  can  implement 
other  compensating  controls, 
she  noted. 

Another  factor  in  the  slow 
pace  of  adoption  is  the  percep¬ 
tion  that  PCI,  unlike  govern¬ 
ment  mandates,  is  a  private 
standard  lacking  enforcement 
teeth,  said  Nigel  Tranter,  a  PCI 
auditor  at  Payment  Software 
Co.,  an  auditing  firm  in  San 
Jose. » 


Although  he  declined  to 
specify  a  time  frame,  ClufF 
said  the  city  does  plan  to 
upgrade  its  Metastorm  BPM 
tools  to  the  newest  version. 

Nathaniel  Palmer,  president 
of  research  firm  Transfor¬ 
mation  and  Innovation  in 
Hingham,  Mass.,  said  this 
announcement  moves  Meta¬ 
storm  ahead  of  other  pure-play 
BPM  companies,  including 
Lombardi  Software  Inc., 
Pegasystems  Inc.,  Sawion  Inc. 
and  IDS  Scheer  AG,  in  bring¬ 
ing  together  human-centric 
and  system-based  BPM.  While 
Metastorm  had  traditionally  fo¬ 
cused  on  human-centric  BPM, 
it  was  weak  on  the  systems  side 
before  acquiring  Commerce- 
Quest  last  year,  he  added. 

“[Version  7]  really  is  a 
closed  loop,”  Palmer  said. 

“It  is  not  just  a  set  of  disparate 
functions.”  » 


Metastorm  Closes  BPM  Loop 


BY  HEATHER  HAVENSTEIN 

Metastorm  Inc.  this  week  will 
foray  for  the  first  time  into 
system-based  process  man¬ 
agement,  with  new  software 
designed  to  give  users  end-to- 
end  business  process  manage¬ 
ment  capabilities. 

With  the  introduction  of 
Metastorm  BPM  Version  7,  the 
vendor  unites  two  traditional¬ 
ly  disparate  functions  among 
pure-play  BPM  players:  the 
management  of  human¬ 
centric  processes  and  system- 
based  processes.  The  new 
suite  includes  an  integration 
management  tool  —  gained 
from  Metastorm’s  acquisition 
of  CommerceQuest  Inc.  —  to 
allow  users  visibility  and  ac¬ 
cess  to  processes  running 
on  ERP  systems  and  legacy 
systems  such  as  IBM  main¬ 


frames,  said  Laura  Mooney, 
senior  director  of  corporate 
and  product  marketing  at  the 
Baltimore-based  company. 

Although  previous  versions 
of  Metastorm’s  tools  have 
been  able  to  trigger  system- 
based  actions  in  a  process, 
users  have  not  been  able 
to  manage  or  control  these 
system-based  processes  on 
the  native  system  or  gather 
data  about  their  performance, 
she  added.  As  a  result,  com¬ 
panies  interested  in  boosting 
the  efficiency  of  a  process  had 
no  way  to  see  if  it  was  being 
held  up  by  a  bottleneck  in  a 
system,  Mooney  said. 

Hap  ClufF,  IT  director  for 
the  city  of  Norfolk,  Va.,  said 
that  his  organization  is  inter¬ 
ested  in  the  new  tool’s  ability 
to  help  the  city  gain  visibility 
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BUSINESS  CONTINUITY 
GOES  UNNOTICED. 
(UNTIL  IT  STOPS.) 


Simply  hoping  a  disaster  or  security  breach  won’t  happen  isn’t  good  enough.  Lack  of  business 
continuity  planning  can  have  catastrophic  implications  for  a  company.  System  unavailability 
can  skyrocket  into  millions  of  dollars  per  minute  of  downtime.  Customer  loyalty  and  regulatory 
compliance  efforts  can  also  be  compromised.  Thankfully,  Symantec  offers  technologies  and 
services  that  help  reduce  the  risk,  duration  and  frequency  of  downtime.  Even  in  the  event  of  a 
security  breach  or  power  outage.  To  find  out  more  about  how  to  help  eliminate  downtime  as 
a  threat  to  the  security  and  availability  of  your  network,  visit  www.symantec.com/datacenter 
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The  cost 

of  getting 

bigger 
just  got 
smaller. 


You  need  more  storage.  You  don't  need  more  fees  or  systems  to 
manage.  The  Pillar  Axiom™  storage  system  lets  you  add  performance 
and  capacity  over  300  TB  per  system,  without  multiple  software 
license  fees.  It  empowers  you  to  manage  data  on  multiple  tiers, 
whether  in  SAN,  NAS  or  both,  through  one  simple  user  interface. 
Because  Pillar  delivers  top-tier  performance  and  capacity,  often  for 
less  than  what  many  companies  pay  just  to  maintain  and  operate 
their  storage  systems,  it  can  really  improve  your  bottom  line. 

To  hear  about  our  new  approach  to  managing  data  storage,  you 
owe  it  to  yourself  to  schedule  a  half-hour  briefing. 

Call  1  -877-252-3706  or  visit  www.pillardata.com/smaller 

Learn  the  truth  about  networked  storage. 


ADVERTISING  SUPPLEMENT 


The  Service-Oriented 


Enterprise 


Welcome  to 
the  End  of 
Business  as 
Usual 


Reduce 
complexity, 
improve 
flexibility  and 
lower  cost 


Register  to  Receive  New  SOE  Book 

Register  for  your  advance  discounted  copy  of  the 
upcoming  book  on  SOE,  The  End  of  Business  as  Usual, 
co-authored  by  Capgemini’s  Andy  Mulholland,  Intel’s 
Chris  Thomas,  and  KurMeta’s  Paul  Kurchina.  Go  to  www. 
nextgenerationinsights.com  and  sign  up  today. 


ith  tie  convergence  of  high - 
crfoffnance  computing  and 
ta  analysis,  global  high-speed 

unications  and  even  advanced 
ng,  the  time  is  right  to: 

mplify  IT 

•  Enable  a  tighter  mapping  of  IT  to  business  goals 

•  Reduce  IT  costs  through  reuse  of  solution 
components 

Global  organizations  must  be  clear-thinking  and 
well  informed  to  make  the  right  decisions  and  take 
advantage  of  this  next  wave  of  information-age  busi¬ 
ness  transformation.  In  particular,  enterprises  must 
make  a  fundamental  shift  from  the  “business  as 
usual”  of  the  past  to  a  future  built  on  innovative  ser¬ 
vice-oriented  business  processes  that  are  supported 
by  a  modular,  manageable  IT  infrastructure.  In  fact, 
by  becoming  a  Service-Oriented  Enterprise  (SOE), 
global  organizations  can  reorganize  and  execute  to 
become  faster  and  more  responsive  to  changes  in  the 
marketplace. 

SOE  is  largely  about  how  the  business  organizes 
itself  around  the  use  of  technology.  Above  all,  SOE 
focuses  on  the  business  imperative  and  offers  oppor¬ 
tunities  to  approach  business  issues  in  a  different  way. 

No  More  “Business  as  Usual” 

To  create  SOE  road  maps  that  promise  an  end  to 
“business  as  usual,”  Intel,  the  worldwide  leader  in  sili¬ 
con  innovation,  is  working  together  with  Capgemini, 
recognized  for  its  thought  leadership  in  service  orien¬ 
tation. 

In  fact,  Intel  and  Capgemini  have  found  that 
organizations  that  successfully  embrace  change  have 
learned  a  number  of  key  lessons: 

•  Valuable  Services  Must  Cross  Firewalls:  Don’t 
keep  services  hidden  internally.  Put  them  in  the 
hands  of  others  in  your  enterprise. 

•  Empower  the  Edge:  Provide  services  and  tools  to 


Intel,  the  Intel  logo,  vPro,  Itanium,  Xeon,  and  Centrino  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Other  names  and  brands  may  be  claimed  as  the  property  of  others. 


or  making  a  single  physical  device 
function  like  several  physical  devices. 
Consolidation  means  reducing  the 
types  or  amount  of  hardware  or  soft¬ 
ware  in  the  data  center  to  cut  real  es¬ 
tate,  power,  licensing  or  management 
costs.  Automation  means  reducing 
the  need  for  human  intervention  to 
manage,  troubleshoot  or  optimize  the 
data  center. 

In  general,  consolidation  and  virtu¬ 
alization  are  easiest  to  achieve,  while 
automation  —  specifically,  automated 
management  —  is  toughest. 

Virtualization  Buffet 

There  are  several  flavors  of  server- 
level  virtualization,  and  that  market 
is  dominated  by  VMware.  The  obvi¬ 
ous  cost  benefits  have  resulted  in 
the  explosive  growth  of  VMware, 
Microsoft’s  decision  to  include  a 
hypervisor  in  its  next-generation 
Longhorn  server  and  the  develop¬ 
ment  of  the  open-source  Xen  hyper¬ 
visor  for  Linux. 

IDC  analyst  Stephen  Elliot  and  other 
observers  say  that  as  virtualization 
becomes  ubiquitous,  what  will  distin¬ 
guish  virtualization  software  is  its  abil¬ 
ity  to  provide  security,  management, 
provisioning  and  the  recording  of  CPU 
usage.  These  records  will  allow  IT 
to  charge  business  units  for  the  re¬ 
sources  they  use  —  and  to  measure 
the  value  IT  delivers  to  the  business. 

Among  the  companies  offering 
such  services  are  Marathon  Tech¬ 
nologies  Inc.,  whose  software  links 
multiple  Windows  servers  in  a 
virtualized,  high-availability  envi¬ 
ronment;  Leostream  Corp.,  whose 
software  manages  server  virtualiza¬ 
tion  products  from  VMware  and 
Microsoft;  and  PlateSpin  Ltd.,  whose 
PowerConvert  product  automatically 
distributes  servers  and  data  among 
Windows  virtual  servers. 

In  June,  an  upgrade  to  VMware’s 
server  virtualization  software  added 
new  power  management  capabilities, 
a  distributed  file  system  that  allows 
users  to  pool  heterogeneous  storage 
arrays  into  virtual  volumes  and  a 
distributed  resource  scheduler  that 
automatically  redistributes  virtual 
machines  among  the  physical  servers 
as  application  demands  change. 

PolyServe  Inc.  in  Beaverton,  Ore., 
performs  virtualization  at  the  file- 


HINDERED  BY  MANAGEMENT 

The  lack  of  which  technologies 
currently  limits  your  ability  to 
have  a  “lights  out”  data  center? 

Interface  standards/systems  that 
let  various  management  tools 
work  together  automatically 

Management  and  monitoring  tools 
to  identify/address  security  or 
compliance  issues 

Policy-based,  self-configuring 
systems  to  handle  routine 
adjustments  automatically 

Support  desk  and  system 
management  tools  that  work 
together  automatically 

Remote  access  and  management 
tools  for  IT  staff,  to  allow 
remote/off-site  management 

BABE;  389  IT  executives;  respondents  could 
choose,  alt  that  apply 

SOURCE  EXCLUSIVE  COM  PUT  E'R'W  ORLt3/£'IO  SURVEY'. 
CONDUCTED  MAY  2006. 

SERVER  SQUEEZE 

My  company  is  currently 
involved  in  consolidating: 

Hardware  servers  (through  dusters, 
blade  servers,,  multicore 
hardware) 

Storage  through  virtualization 
or  other  consolidation 

Networks  (such  as  adding 
VoIP  to  an  existing  network) 

Applications  (attempting 
to  reduce  the  number  of 
licenses  or  seats) 

Physical  data  centers 

None  of  the  above 

BASE::  389  IT  executives;  respondents,  could 
choose  all  that  apply. 

SOURCE  EXCLUSIVE;  COMPUTE^ WOR^DJ. C7 0  SURVEY.. 
CON'pUGTiE-D  MAY  20©6 


server  level  with  separate  file-serving 
and  database  “utilities.”  With  Poly- 
Serve,  says  CEO  Mike  Stankey,  “cus¬ 
tomers  can  literally  drag  and  drop 
the  database  onto  a  bigger  or  smaller 
server”  and  build  policies  dictating 
when  performance  slowdowns  will 
trigger  such  a  move.  PolyServe  com¬ 
plements,  rather  than  replaces,  proc¬ 
essor-level  virtualization  such  as  that 
provided  by  VMware,  he  says.  That’s 
because  VMware  and  similar  virtual¬ 
ization  products  don’t  automatically 


|  reconfigure  those  applications  so 
backup  and  other  functions  work 
in  the  virtualized  environment. 

Work  in  Progress 

Storage  virtualization  promises  sav¬ 
ings  by  increasing  the  utilization 
of  existing  disk  space  and  easier 
management  of  fewer  disk  pools,  as 
well  as  business  benefits  through 
improved  information  sharing. 
However,  a  lack  of  standards  and  im¬ 
mature  technology  have  limited  its 
deployment.  Many  storage  virtualiza¬ 
tion  products  work  best  or  work  only 
within  arrays  from  a  single  vendor. 

Virtualized  servers  sometimes  don’t 
work  well  with  virtualized  storage  be¬ 
cause  currently,  every  virtual  machine 
in  a  server  must  share  the  same  ex¬ 
ternal  storage  resources  and  a  single 
set  of  addresses  in  a  Fibre  Channel 
storage-area  network.  This  makes  it 
harder  for  administrators  to  create 
separate  zones  for  development,  test 
and  production  virtual  machines; 
prioritize  SAN  resources  for  mission- 
critical  applications;  and  quickly  move 
a  virtual  server  to  another  physical  ma¬ 
chine  in  case  of  a  hardware  failure. 

A  new  standard  called  N-Port 
ID  Virtualization,  or  NPIV,  allows  a 
single  host  bus  adapter  (HBA)  to  use 
multiple  addresses  within  a  storage 
network.  Now  available  only  on  IBM 
zSeries  mainframes,  HBA  vendor 
Emulex  Corp.  is  working  to  expand 
NPIV  to  other  platforms. 

Some  virtualization  is  possible  at 
the  network  level  through  products 
such  as  Cisco  Systems  Inc.’s  Catalyst 
Switching  Series.  These  products  al¬ 
low  the  partitioning  of  a  single  physi¬ 
cal  network  into  many  virtual  net¬ 
works,  which  can  be  configured  for 
the  performance  or  security  needs  of 
specific  applications  or  networks. 

Where’s  the  Holdup? 

One  of  the  big  challenges  is  looking 
deep  within  complex,  multitiered  or 
service-oriented  applications  to  see 
what  hardware  or  software  is  causing 
a  slowdown.  CoreFirst  Transaction 
Workload  Management  software 
from  OpTier  Ltd.  in  New  York  is  one 
of  the  strongest  players  in  this  field, 
according  to  several  customers,  who 
declined  to  be  identified. 

Unlike  other  products,  OpTier’s 
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Legendary  Reliability* 


The  more  tiers  developers  build  into 
their  applications,  and  the  more  data 
sources  they  touch,  the  more  flexibil¬ 
ity  managers  will  want  in  changing 
—  on  the  fly  and  automatically  —  the 
performance  of  those  components  so 
they  better  match  business  needs. 

David  Miller,  a  director  in  the  tech¬ 
nology  and  infrastructure  practice  at 
systems  integrator  Avanade  U.K.  Ltd., 
used  PolyServe  to  reduce  the  number 
of  “passive”  (or  hot  spare)  servers  for 
a  large  database  deployment  from  500 
to  125.  PolyServe  also  helped  reduce 
fail-over  time  from  five  minutes  to  30 
seconds.  The  next  step,  he  says,  is  for 
products  such  as  PolyServe  to  perform 
such  fail-over  automatically  as  applica¬ 
tions  require  it,  rather  than  requiring 
an  administrator  to  initiate  the  change. 

Systems  administrators  are  re¬ 


luctant  to  give  up  a  lot  of  control  to 
automated  tools.  Randy  Wood,  a  tech¬ 
nical  support  manager  in  BellSouth’s 
Communications  Systems  Group  in 
Atlanta,  uses  the  Network  Automation 
System  from  Opsware  Inc.,  but  only  to 
view  alerts  from  customer  networks. 
“It’s  unlikely  we  would  let  the  [soft¬ 
ware]  just  execute  [a]  change”  with¬ 
out  first  contacting  the  customer,  he 
says.  A  customer  might  have  violated 
network  routing  policies,  says  Wood, 
but  only  to  troubleshoot  a  problem 
—  something  the  software  would  have 
no  way  of  knowing. 

The  Value-Adds 

Some  companies  turn  to  IT  automa¬ 
tion  software  not  to  manage  their  sys¬ 
tems,  but  to  monitor  their  compliance 
with  regulations  governing  things 


such  as  access  to  critical  data.  That’s 
the  case  at  restaurant  chain  Red  Rob¬ 
in,  which  uses  Configuresoft’s  ECM 
to  ensure  the  proper  configuration  of 
45  Windows  servers  at  its  headquar¬ 
ters.  The  company  also  uses  ECM  to 
instantly  change  passwords  in  the 
service  accounts  in  its  Windows  Ac¬ 
tive  Directory  domains,  a  process  that 
used  to  take  48  hours,  says  Randall. 

But  it  will  be  several  years  at  least  be¬ 
fore  a  single  “dashboard”  exists,  observ¬ 
ers  say.  They  advise  IT  managers  to 
standardize  the  products  they  buy  and 
the  way  they  configure  them  to  give 
automated  tools  a  chance  to  work.  ♦ 


Scheier  is  a  freelance  writer  in 
Boylston,  Mass.,  and  a  frequent  con¬ 
tributor  to  Computerworld.  Contact 
him  at  rscheier@charter.net. 


\  Vendors  Chase 
i  Data  Center  Space 

The  next-generation  data  center  will  require  speciai- 
.  ized  technologies,  as  well  as  high-level  management 
I  software  for  a  unified  view. 

I  One  of  the  stronger  companies  is  Opsware  Inc., 

I  says  IDC  analyst  Stephen  Elliot,  which  has  “done  a 
I  good  job  in  [the]  niche  market”  of  server  and  net- 
I  work  configuration  and  provisioning.  Another  firm 

“  cited  by  Elliot  and  Gartner  is  QpTier  Ltd.,  whose 

CoreFirst  “autodiscovers,  tracks  and  monitors  unique 
transactions”  and  enables  policies  that  give  specific 
.  transactions  more  access  to  CPU,  memory  or  other 
I  sources,  according  to  a  March  2006  Gartner  report. 

I  Another  firm  cited  by  both  research  groups  is 

I  Cassatt  Corp.  Gartner  says  its  Collage  software 
I  creates  virtualized  hardware  and  software  resources 
I  running  on  Linux,  Solaris  and  Windows  and  then  lets 
"  administrators  scale  capacity  as  needed.  Cassatt’s 
focus  is  on  scaling  a  specific  layer  of  an  application 
environment,  such  as  the  J2EE  application  server 
I  tier,  according  to  Gartner,  rather  than  on  optimizing  a 
I  specific  function  such  as  inventory  lookups. 

I  Splunk  Inc.  uses  search  technology  to  help  IT 

I  managers  find  the  causes  of  problems  from  unstruc- 
I  tured  data  such  as  server  and  event  logs,  and  inte- 
•  grates  with  CA’s  Unicenter  NSM  R11. 

1  IBM  s  driving  several  key  standards  for  captur¬ 

ing  and  sharing  data  about  the  IT  environment,  says 
Ric  Telford,  vice  president  of  autonomic  computing 
.  at  IBM’s  Tivoli  unit.  They  include  the  Solution  De- 


I 

I 

ployment  Descriptor  Standard,  which  describes  the  I 

specifications  for  deploying  an  operating  system,  I 

server  or  application;  and  Configuration  Manage-  • 

ment  Databases,  which  describe  the  state  of  all  the  " 

components  within  the  IT  infrastructure.  8 

Hewlett-Packard  Co.  has  a  proven  set  of  man¬ 
agement  products  and  a  large  installed  base  with  , 

its  OpenView  management  suite,  says  Elliot.  It  has  | 

also  developed  products  such  as  Business  Process  | 

Insight,  which  focuses  on  automation.  | 

CA  Inc.  “has  really  put  a  lot  of  work  into  Integra-  I 

tion”  within  its  Unicenter  suite  of  management  appli-  • 
cations,  Elliot  says,  “but  with  a  recent  spate  of  acqui-  * 
sitions”  has  yet  more  integration  work  to  do.  * 

BMC  Software  Inc.  provides  a  number  of  infra¬ 
structure  management  tools,  such  as  its  BMC  Virtu-  . 
alizer  line,  which  provides  automated,  policy-based  | 

provisioning  of  additional  capacity  for  applications  | 

running  on  virtual  machines  or  physical  servers.  | 

EMC  Corp.,  owner  of  VMware,  has  bought  net-  I 

work  manager  vendor  Smarts  Inc.  With  its  presence  • 
in  large  firms,  EMC  “is  one  acquisition  away  from  s 

changing  the  game  for  a  lot  of  players,”  says  Elliot. 

Microsoft  Corp.  is  a  “sleeping  giant”  -  aggres¬ 
sive  with  rollouts  “but  late  to  the  game  in  virtualiza-  , 

tion  and  still  Windows-centric,”  he  says.  Microsoft  » 

is  developing  its  own  virtualization  management  | 

software,  code-named  Carmine,  says  Eric  Berg,  a  | 

director  in  the  Windows  and  enterprise  management  I 
division.  Next  year,  the  company  plans  to  release  I 

Systems  Center  Service  Desk,  which  will  link  people,  8 
processes  and  technologies  to  solve  problems,  man-  5 
age  assets  and  provide  change  management.  * 

-  ROBERT  L.  SCHEIER  . 
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The  spinorr  that  acted  like  a  startup. 

Avaya,  a  global  leader  in  communication  software,;  systems  and  services,  spun 
off  from  Lucent  with  a  legacy  IT  infrastructure  that,  while  efficient,  wasn’t  nimble 
enough  to  be  a  competitive  advantage.  HP  partnered  with  Avaya  to  implement 
IT  Service  Management  and  HP  OpenView,  effectively  re-deploying  existing 
technology  assets.  Today,  IT  spending  is  down  30%.  Millions  have  been  saved 
by  finding  unused  capacity.  And  Avaya  answers  whenever  opportunity  calls. 
hp.com/adapt 

Tools  of  change 
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Symantec  Turns  to  Innovation 
As  Microsoft  Takes  on  Security 


sv  Robert  McMillan 

CUPERTINO.  CALIF. 

YMANTEC  CORP.  has 
had  a  bumpy  ride  this 
past  year,  closing  one 
of  the  largest  soft¬ 
ware  company  acquisitions 
in  history  —  the  $10.2  billion 
purchase  of  Veritas  Software 
Corp.  —  and  facing  executive 
departures  and  a  company  re¬ 
organization.  But  perhaps  the 
most  serious  problem  facing 
CEO  John  Thompson  is  a  formi¬ 
dable  new  competitor:  Micro¬ 
soft  Corp.  In  an  interview  at 
Symantec’s  headquarters  here, 
Thompson  talked  about  his 
plans  to  take  on  Microsoft  in 
the  security  software  business. 

Where  worries  you  most  about 
competing  with  Microsoft?  I’m 

not  worried  about  Microsoft 
at  all.  Let’s  be  clear  about  that. 
If  anything,  my  focus  is  on 
making  sure  we  can  deliver 
the  level  of  innovation  and  the 
level  of  visibility  or  of  capabili¬ 
ties  that  we  always  have.  And 
to  the  extent  that  Microsoft 


BY  SHELLEY  SOLHEIM 

The  Top500  list  of  the  world’s 
fastest  supercomputers,  re¬ 
leased  late  last  month,  showed 
IBM’s  Blue  Gene  continuing  to 
reign  and  Advanced  Micro  De¬ 
vices  Inc.’s  Opteron  processor 
powering  more  systems  on  the 
list  than  last  year. 

IBM’s  Blue  Gene/L  System, 
used  at  the  U.S.  Department  of 
Energy’s  Lawrence  Livermore 
National  Laboratory,  recently 
reached  a  Linpack  benchmark 
performance  of  280.6  trillion 
floating-point  operations  per 
second  (T  FLOPS)  to  easily  top 
the  list.  No  other  system  has  yet 
passed  the  100  TFLOPS  mark. 

IBM  supercomputers  ac¬ 
counted  for  about  half  of  the 
list,  with  Hewlett-Packard  Co. 
occupying  nearly  a  third. 

The  Top500  Supercorn- 


plays  fairly,  there  is  a 
level  playing  field.  If 
they  do  something  that 
is  unfair,  clearly,  we 
will  be  watching,  and 
I’m  sure  others  will  as 
well.  Microsoft  is  syn¬ 
onymous  with  a  lot  of 
things  in  the  software 
and  technology  indus¬ 
try.  Security  is  not  one 
of  them.  And  they’ve  got  a 
long  way  to  go  to  demonstrate 
not  only  that  capability,  but  to 
deliver  and  build  a  reputation 
of  being  able  to  support  a  vast 
array  of  users  in  that  regard. 


Tools  support 
Ethernet  network 
interoperability 

BY  SHARON  FISHER 

Cisco  Systems  Inc.  last  month 
brought  out  several  products, 
including  an  updated  tool  that 
can  manage  both  InfiniBand 


puter  Sites  list  is  compiled  by 
supercomputing  experts  Jack 
Dongarra  at  the  University  of 
Tennessee,  Knoxville,  Erich 
Strohmaier  and  Horst  Simon 
at  the  National  Energy  Re¬ 
search  Scientific  Computing 
Center  at  the  Lawrence  Berke¬ 
ley  National  Laboratory,  and 
Hans  Meuer  of  the  University 
of  Mannheim. 

Fewer  Changes 

The  Top500  list,  known  for 
its  rapid  turnover,  showed 
fewer  changes  than  usual  this 
year.  Some  158  systems  were 
bumped  from  the  latest  list, 
compared  with  more  than  200 
systems  displaced  in  the  June 
2005  list. 

But  in  the  fast-paced  world 
of  high-performance  super¬ 
computing,  no  systems  maker 


Hasn’t  Microsoft  been 
talking  about  security 
for  some  time,  at  least 
in  its  marketing  efforts? 

I  think  that’s  good 
for  the  whole  indus¬ 
try,  [as  is]  the  fact  that 
Microsoft  is  going  to 
put  enormous  money 
behind  raising  the 
awareness  that  people 
have  that  they  need  to  secure 
their  connected  experience. 
That’s  good  for  Microsoft, 
but  that’s  [also]  good  for  us. 
That’s  good  for  the  world 
at  large. 


and  Ethernet  networking 
technologies  by  incorporating 
code  gained  when  Cisco  ac¬ 
quired  Topspin  Communica¬ 
tions  Inc.  a  year  ago. 

Dennis  Michael,  manager 
of  high  productivity  comput¬ 
ing  at  the  Center  for  Compu¬ 
tational  Earth  and  Environ¬ 
mental  Science  at  Stanford 


can  rest  on  its  laurels  for  long. 

“The  thresholds  to  get  into 
the  top  50  move  fast;  machines 
are  there  one  day,  gone  the 
next,”  said  Herb  Schultz,  man¬ 
ager  for  IBM’s  Blue  Gene.  “It’s 
no  secret  Blue  Gene  has  been 
in  the  market  for  a  little  while 
and  we’re  looking  at  ways 
to  make  the  chips  faster,  get 
more  chips  on  a  core  and  do  a 
faster  job  of  interconnecting 
nodes,”  Schultz  said. 

Among  other  trends  on  the 
list:  Intel  Corp.  microproces¬ 
sors  powered  301  of  the  sys¬ 
tems,  down  from  333  last  year, 
while  AMD’s  Opteron  proces¬ 
sors  gained  some  ground  by 
running  81  systems,  compared 
with  just  25  one  year  ago. » 


Solheim  is  a  reporter  for  the 
IDG  News  Service. 


Will  you  use  partnerships  as  part 
of  a  strategy  to  compete?  Well,  I 
would  argue  that  the  most  suc¬ 
cessful  defensive  battle  against 
Microsoft  was  Intuit.  Clearly, 
Intuit  doubled  down  and  said, 
“Look,  we’re  going  to  outinno- 
vate  Microsoft.  We’re  going 
to  run  harder  than  they  are  to 
deliver  a  series  of  capabilities 
that  are  very  compelling  to  our 
user  base.”  And  guess  what? 
Microsoft  had  to  acquiesce 
and  work  somewhere  else. 

When  are  you  planning  to  deliver 
Norton  360,  Symantec’s  up- 


University,  said  the  new  Cis- 
coWorks  LAN  Management 
Solution  (LMS)  integrated 
package  can  help  the  univer¬ 
sity  manage  interoperability 
between  its  Ethernet  and  In¬ 
finiBand  networks. 

The  new  LMS  package 
will  help  Stanford  increase 
the  size  of  its  InfiniBand  net¬ 
work,  said  Jerry  Harris,  a  pro¬ 
fessor  of  geophysics  and  di¬ 
rector  of  the  center.  It  would 
not  be  practical  to  manage  a 
larger  cluster  with  the  tools  it 
has  now,  he  said. 

In  addition,  the  new  man¬ 
agement  software  makes  it 
more  likely  that  other  groups, 
such  as  the  one  working  on 
an  oil  exploration  project  at 
Stanford,  will  move  to  Infini¬ 
Band,  said  Bob  Clap,  a  re¬ 
search  associate  in  geophysics 
at  the  university. 

Cisco  also  released  a  new 
version  of  the  CiscoWorks 
LMS  network  management 
software  that  supports  the 
Topspin  InfiniBand  technol¬ 
ogy  and  new  SFS  7000D  Series 
InfiniBand  double  data  rate 
(DDR)  switches  that  improve 
InfiniBand  performance. 

In  addition,  Cisco  released 
a  new  version  of  the  Topspin 
InfiniBand  operating  sys¬ 
tem  that  adds  security  and 


IBM  Easily  Heads  Top500  Supercomputer  List 


Cisco  Unveils  Several  InfiniBand  Products 


coming  competitor  to  Windows 
Live  OneCare?  It’s  less  about 
when  the  code  is  going  to  be 
ready.  When’s  the  right  time 
to  launch  the  product?  The 
code  is  still  targeted  for  being 
done  in  September.  We’ll  do 
our  beta  program  this  summer. 
Based  upon  the  feedback  we 
get  there,  we’ll  see  whether  we 
meet  the  current  target. 

Are  you  concerned  about  spyware 

at  all?  Spyware  is  on  my  mind. 
People  who  put  software  on 
your  machine  to  track  activity 
that  you’re  engaged  in  while 
you’re  using  your  machine, 
that’s  on  our  mind.  [Spyware] 
undermines  confidence  that 
users  have  about  operating  in 
the  connected  world.  ► 


McMillan  is  a  reporter  for  the 
IDG  News  Service. 


management  features  found 
in  Cisco’s  Internetworking 
Operating  System  Ethernet 
software.  Cisco  acquired  the 
Topspin  InfiniBand  technol¬ 
ogy  in  May  2005. 

William  Hurley,  an  analyst 
at  Data  Mobility  Group  LLC 
in  Nashua,  N.H.,  said  tools 
that  can  manage  both  Ethernet 
and  InfiniBand  technologies 
can  allay  user  concerns  about 
adopting  InfiniBand. 

Committed  to  Technology 

Cindy  Borovick,  an  analyst  at 
IDC  in  Framingham,  Mass., 
said  the  announcement  dem¬ 
onstrates  that  Cisco  is  com¬ 
mitted  to  the  InfiniBand  tech¬ 
nology  it  acquired  last  year. 

She  added  that  InfiniBand 
technology  still  lags  far  behind 
Ethernet.  IDC  research  found 
that  sales  of  InfiniBand  prod¬ 
ucts  totaled  $120  million  in 
2005,  compared  with  $818  mil¬ 
lion  worth  of  10  Gigabit  Ether¬ 
net  products,  she  said. 

The  SFS  7000D  Series 
InfiniBand  DDR  switches, 
with  the  latest  version  of  the 
Topspin  operating  system, 
will  be  available  from  reseller 
partners  over  the  next  90  days. 
The  CiscoWorks  LMS  soft¬ 
ware  will  ship  this  month  for 
about  $10,000  for  300  devices 
and  about  $25,000  for  an  un¬ 
limited  license. » 
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the  system  from  a  set  of  reusable  IT 
components:  Web  pages,  a  relational 
database,  Web  services  for  data  trans¬ 
port,  and  spreadsheets  and  personal 
databases  for  data  analysis  and  report¬ 
ing.  All  these  components  are  tied 
together  with  small  chunks  of  program 
code  that  were  installed  and  tested  in  a 
few  weeks. 

Version  1.0  of  this  system  was  in  pro¬ 
duction  within  30  days.  We  had  decid¬ 
ed  on  a  30-day  schedule  at  the  start  of 
the  project  and  then  shaped  the  work 
to  fit  within  this  tight  time  frame.  We 
couldn’t  do  everything,  so  we  focused 
on  doing  what  would  make  the  biggest 
impact  in  the  time  available. 


The  new  system  eliminates  faxes 
and  e-mails  that  inventory  planners 
used  to  type  into  personal  databases.  It 
provides  Web  data  entry  so  manufac¬ 
turers  and  distributors  in  the  supply 
chain  can  enter  their  own  inventory 
numbers.  Those  numbers  are  then  im¬ 
ported  into  a  central  database  for  the 
whole  system.  Inventory  planners  can 
download  the  data  they  need  into  their 
personal  databases. 

We  provided  a  set  of  stored  proce¬ 
dures  to  produce  standard  reports  and 
graphs.  Inventory  planners  can  do 
their  own  ad  hoc  queries  and  load  data 
into  preformatted  spreadsheets  to  con¬ 
duct  further  analysis.  They  now  spend 


most  of  their  time  doing  high-value 
analysis  and  decision-making  instead 
of  data  entry. 

You  may  be  thinking,  “Well,  gee, 
that’s  awfully  simple.”  Yes,  it  is.  That’s 
why  it’s  so  effective.  The  system  has 
been  in  use  for  several  weeks  now,  and 
we  are  working  on  the  next  round  of 
enhancements.  We’ll  add  automated 
data  collection  for  those  suppliers  that 
want  it.  We’ll  provide  data  encryp¬ 
tion  and  additional  error  checking. 
There  will  be  enhanced  performance¬ 
monitoring  features  too.  The  inventory 
planners  have  also  put  together  a  list  of 
other  features  they  want. 

Again,  we’ll  scope  the  work  in  this 


next  round  to  fit  into  a  tight  time  frame. 
The  system  practically  grows  before 
our  eyes.  And  as  it  grows,  it  becomes 
more  tailored  to  fit  the  exact  needs  of 
the  people  using  it,  even  though  it  is  be¬ 
ing  built  from  standard  IT  components. 

This  is  agile  IT.  It  delivers  major 
business  benefits  at  a  fraction  of  the 
cost  that  would  otherwise  be  incurred 
if  the  company  were  to  go  the  conven¬ 
tional  route  of  buying  and  installing  a 
large,  complex,  all-in-one  package. * 


OMore  columnists  and  links  to  archives  of  previous 
columns  are  on  our  Web  site: 


www.computerworld.com/columns 


READERS’  LETTERS 


Media  Sanitization 
In  the  NIST  of  Time 

AN  INTERESTING  observa¬ 
tion  on  the  issues  raised  in  the 
article  “Utility's  Disk  Drives  -  and 
Data  -  Sold  on  eBay”  [News,  May 
8]  is  that  the  National  Institute  of 
Standards  and  Technology  has  a 
free  guide  for  media  sanitization 
on  its  Web  site,  http://csrc.nist.gov. 
Look  for  Draft  Guidelines  for  Media 
Sanitization,  NIST  Special  Publica¬ 
tion  (SP)  800-88. 

Rich  Kissel 

Information  security  analyst, 
Ijamsville,  Md. 

Encryption  Would 
Have  Spared  VA 

■  FIND  IT  reprehensible  that  this 
was  allowed  to  occur  [“Huge  Data 
Breach  Puts  VA's  IT  Policies  Under 
a  Microscope,”  Page  One,  May  29], 
Whole  disk  or  simple  file  encryp¬ 
tion  is  simple  and  inexpensive.  I'm 
reminded  of  what  Adm.  Grace 
Hopper  said  long  ago:  “Someday, 
on  the  corporate  balance  sheet, 
there  will  be  an  entry  which  reads, 
‘information’;  for  in  most  cases  the 
information  is  more  valuable  than 
the  hardware  which  processes  it.” 
Mike  Prosser 

Principal  security  analyst, 

San  Antonio 


No,  It  Wouldn’t 

OK,  SO  Vista  can  encrypt  data 
[“Microsoft  Touts  Vista  Secu¬ 
rity  Features,”  Computerworld.com, 


May  25],  However,  the  root  problem 
is  not  that  the  data  on  the  lost  VA 
laptop  was  not  encrypted,  but  that 
it  was  there  to  begin  with.  I  doubt 
that  Vista  will  have  mechanisms  to 
protect  against  people  who  don't 
think  things  through. 

Protection  by  obfuscation  is  a  bad 
approach.  Every  encryption  can  and 
will  be  broken  eventually.  Getting 
access  to  a  lot  of  Social  Security 
numbers  and  other  personal  infor¬ 
mation  is  enough  of  a  reason  for 
unsavory  people  to  try  to  break  it. 
Frank  Mogaddedi 
Systems  administrator, 
Winston-Salem,  N.C. 


No  Laughing  Matter 

Like  don  tennant,  i have 
been  awarded  the  dubious  title 
of  “identity  theft  candidate."  As  for 
the  May  29  Computerworld  cartoon 
he  wrote  about  [“Veterans  Affair,” 
Editorial,  June  5],  I  have  this  to  say; 
big  deal.  I  think  the  overwhelming 
majority  of  vets  who  see  the  cartoon 
will  do  what  I  did  -  smile,  or  maybe 
chuckle  contemplatively.  Most  of  us 
know  the  cartoon  wasn’t  about  our 
honored  dead;  it  was  about  nonex¬ 
istent  security  and  ideas  that  should 
have  been  implemented  about  20 
years  ago. 

Dave  Whitney 
Systems  administrator, 

Virginia  Beach,  Va., 
dave@davewhitney.com 


I  AM  SURPRISED  that  anybody, 
veteran  or  not,  would  be  offended 
by  the  cartoon  in  question.  I’m  an 


Air  Force  veteran,  and  I  completely 
understood  the  point  that  was  be¬ 
ing  made. 

Les  Sattazahn 
System  specialist,  CNH, 

New  Holland,  Pa. 


I  WAS  DISTURBED  by  your 
tasteless  cartoon  using  the  Tomb 
of  the  Unknown  Soldier.  I  was  so 
disgusted  that  I  did  not  want  to  even 
write  to  tell  you  about  it.  I  am  very 
happy  that  someone  called  you  to 
the  carpet  on  it. 

What  bothers  me  now  is  the 
fact  that  you  wanted  to  somehow 
justify  its  publication  based  on  your 
service.  I  served  in  war  too,  and  this 
fact  made  the  cartoon  more  taste¬ 
less  to  me. 

I  am  not  one  who  usually  gets  of¬ 
fended,  and  if  offended  I  usually  bite 
my  tongue  unless  I  feel  it  is  truly  ap¬ 
propriate.  This  is  one  of  those  times. 

Please  take  your  licks,  and  con¬ 
tinue  to  cover  what  you  do  best:  the 
business  of  IT. 

John  Yeary 

Senior  enterprise  architect, 

AGFA  Healthcare, 

Greenville,  S.C., 
john.yeary@agfa.com 


All  or  Nothing 

THE  OHIO  UNIVERSITY  Alumni 
Association  called  me  on  May 
15,  soliciting  funds  [“Ohio  University 
Reports  Two  Separate  Security 
Breaches,”  Computerworld.com, 
May  3],  I  requested  that  my  Social 
Security  number  and  birth  date  be 
removed  from  the  alumni  database. 


The  call  center  supervisor  said 
they  could  not  selectively  remove 
some  of  my  personal  information; 
they  could  only  remove  all  of  my  in¬ 
formation  from  the  database.  Guess 
what  I  asked  them  to  do? 

Jonathon  Hinson 
Systems  analyst, 

Office  of  Information 
Technology,  state  of  Maine, 
Augusta 

Acknowledging  Gore 
As  Internet  Visionary 

IN  COVERING  “The  Top  10  IT  De¬ 
velopments  of  the  Past  20  Years" 
on  May  22,  you  state,  “Fortunately, 
Computerworld  never  ran  a  story 
with  the  headline  ‘Al  Gore  Invents 
Internet.’  ” 

Contrary  to  George  Bush’s 
Luddites,  Gore  never  claimed  he 
invented  the  Internet.  In  a  March 
9, 1999,  interview  with  Wolf  Blitzer 
during  CNN’s  Late  Edition  show. 

Gore  specifically  said,  “I  took  the 
initiative  in  creating  the  Internet.”  In 
1976,  Rep.  Gore  initiated  legislation 
for  construction  of  a  “data  highway.” 
In  1986,  Sen.  Gore's  Supercom¬ 
puter  Network  Study  Act  called  for 
mapping  public  information  needs 
onto  university  and  government 
networks,  laying  the  foundation  for 
the  public  Internet. 

Gore’s  1991  article  for  Scientific 
American  described  his  vision  for 
the  Internet  as  a  mass-media  com¬ 
munication  tool  while  Bill  Gates  was 
still  touting  CD-ROM.  Gore’s  vision¬ 
ary  efforts  were  key  to  creating  the 
Internet. 


Stop  perpetuating  myths  created 
by  the  same  people  who  claimed 
WMDs  were  in  Iraq  and  start  paying 
homage  to  a  man  of  rare  integrity 
who  truly  was  instrumental  in  the 
creation  of  the  Internet. 

Bruce  Stenman 
Lightsmith  Inc., 

Prunedale,  Calif. 


3,000  Issues  or  Bust 

MY  BET  is  that  there  will  be  a 
3,000th  print  issue  of  Com¬ 
puterworld  in  2026  [“Why  There 
Won’t  Be  a  3,000th  Issue,”  Com- 
puterworld.com,  May  22].  You  under¬ 
estimate  the  power  of  nostalgia. 

Also,  the  death  of  the  corporate 
programmer  has  been  discussed 
for  almost  my  entire  20-plus-year 
career.  The  languages  keep  chang¬ 
ing,  but  the  coding  work  still  goes 
on.  And  there  will  always  be  techno¬ 
phobic  people  asking  technologists 
to  “make  that  thing  do  what  I  want 
it  to  do.” 

John  E.  Columbus 

Owner, 

Columbus  Consulting  Group, 

New  Hope,  Minn., 
detanyek@hotmail.com 

COMPUTERWORLD  welcomes  com¬ 
ments  from  its  readers.  Letters  will 
be  edited  for  brevity  and  clarity.  They 
should  be  addressed  to  Jamie  Eckle, 
letters  editor,  Computerworld,  P0  Box 
9171, 1  Speen  Street,  Framingham, 
Mass.  01701.  Fax:  (508)  879-4843. 
E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 
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Adobe  Plans  Release 
Of  License  Manager 

a  Adobe  Systems  Inc.  announced 
that  it  plans  to  ship  Adobe 
License  Manager,  a  system 
that’s  intended  to  help  existing 
customers  track  and  monitor 
their  Adobe  software  licenses 
more  easily.  The  system,  which 
is  based  on  Macrovision  Corp.’s 
FlexNet  Manager  and  runs 
behind  a  customer’s  firewall,  is 
designed  to  help  Adobe  custom¬ 
ers  determine  whether  they  are 
in  compliance  with  the  terms  of 
their  licensing  agreements,  ac¬ 
cording  to  the  San  Jose-based 
software  provider.  Adobe  Li¬ 
cense  Manager  will  be  available 
free  of  charge  to  Adobe  custom¬ 
ers  and  will  ship  by  year’s  end. 

Disuk  Announces 
Encryption  Appliance 

■  Disuk  Ltd.  in  Silverstone,  Eng¬ 
land,  has  announced  a  new  addi¬ 
tion  to  its  line  of  Paranoia2  data 
encryption  appliances.  Designed 
to  sit  between  archive  servers 
and  UDO  (Ultra  Density  Optical) 
media  libraries  from  optical  stor¬ 
age  manufacturer  Plasmon  PLC, 
the  new  appliance  encrypts  data 
during  the  transfer  process  with¬ 
out  slowing  overall  write  speed, 
according  to  the  company.  The 
appliance  will  be  available  in  the 
third  quarter.  Pricing,  with  Plas¬ 
mon  UDO  support,  ranges  from 
$11,500  to  $14,500. 


DataDirect  Updates 
XQuery  Engine 

a  DataDirect  Technologies  Inc., 
an  operating  company  of  Prog¬ 
ress  Software  Corp.,  released 
Version  2.0  of  DataDirect 
XQuery,  its  embeddable, 
database-independent  compo¬ 
nent  for  processing  and  aggre¬ 
gating  XML,  relational  and  data 
formats  such  as  electronic  data 
interchange  and  CSV.  Bedford, 
Mass.-based  DataDirect  said 
Version  2.0  speeds  up  queries  in 
any  environment  and  supports 
older  data  formats.  Version  2.0 
also  adds  support  for  Oracle 
10gR2,  Sybase  15  and  Microsoft 
SQL  Server  2005.  XQuery  li¬ 
censes  start  at  $495. 


CURT  A.  MONASH 


Companies  Need  a  Strategy 
To  Manage  Words 


FOR  THOUSANDS  OF  YEARS,  the  primary 
way  humans  record  and  exchange  informa¬ 
tion  has  remained  the  same:  We’ve  used  lan¬ 
guage.  Pictures  and  numbers  are  important 
too,  but  the  history  of  humankind  is  literally 
written  in  words. 

Businesses  and  other  enterprises  are  no  exception  to 
this  rule.  Customer  communication  is  done  through 


words.  Internal  commu¬ 
nication  is  done  through 
words.  Information  is 
gathered  largely  through 
words.  Meetings,  phone 
calls,  e-mail,  instant  mes¬ 
saging,  reading  on  the  Web 
—  taken  together,  those  play 
a  much  larger  role  in  most 
knowledge  workers’  lives 
than  numbers,  graphics  or 
routine  transactions. 

So  do  enterprises  have 
comprehensive  strategies 
for  managing  all  these 
words?  No  way.  You  can 
hardly  be  in  business  these 
days  unless  you  have  sophisticated  ways 
to  manage,  understand,  analyze,  exploit 
and  add  to  structured  data.  But  technol¬ 
ogy  and  business  strategies  for  dealing 
with  textual  data  are  vastly  more  primi¬ 
tive.  And  the  situation  is  worse  yet  for 
voice  information  (which  is  basically  like 
text,  except  that  it’s  dirty  and  highly  un¬ 
compressed). 

To  be  sure,  there  have  been  some  be¬ 
ginnings.  Search,  text  indexing  and/or 
what  generally  passes  for  knowledge 
management  have  become  must-haves 
at  many  companies,  as  has  content  man¬ 
agement.  Storage  strategies  are  increas¬ 
ingly  taking  account  of  the  nonupdatable 
nature  of  most  documents.  Text  mining 
is  a  small  but  fast-growing  market  with  a 
number  of  hot  subsectors. 

Indeed,  in  a  few  cases,  corporate  ontol¬ 
ogies  are  being  built.  (Procter  &  Gamble 
even  has  one  computational  linguist 
among  its  120,000-plus  employees  and 
may  hire  a  second  next  year.)  Yet  vastly 


more  work  is  needed,  and  the 
time  has  come  for  a  compre¬ 
hensive  road  map  toward  ac¬ 
quiring  a  management  strat¬ 
egy  for  linguistic  content. 

But  before  drawing  such  a 
map,  we  should  get  a  clearer 
view  of  our  destination. 
What  should  a  business  hope 
to  accomplish  through  the 
electronic  management  of 
text?  A  good  core  list  might 
be  as  follows: 

Search  and  document¬ 
finding.  For  many  people, 
text  management  begins 
and  ends  with  search.  But 
even  if  you  believe  that,  there  are  many 
kinds  of  search,  each  with  its  own 
difficulties.  You  want  to  present  infor¬ 
mation  to  customers,  partners  and  em¬ 
ployees.  Some  of  it  you  really  want  to 
press  on  them  for  marketing  purposes, 
whether  or  not  it’s  exactly  what  they 
most  want  to  see.  In  other  cases,  you 
want  to  help  somebody  find  a  needle  in 
a  haystack  —  without  being  sure  that 
the  needle  even  exists  in  the  first  place. 
Document  formats  range  from  Web 
pages  to  e-mail  to  Office  output  and 
keep  going  from  there;  modern  enter¬ 
prise  search  tools  typically  recognize 
well  over  100  file  types. 

To  slice  it  another  way,  search  is  need¬ 
ed  in  almost  every  department  and  func¬ 
tion:  sales,  Web  marketing,  engineering, 
recruiting  and  employee-facing  human 
resources,  to  name  just  a  few.  But  the 
requirements  and  challenges  of  each  of 
those  applications  can  be  so  different  as 
to  require  a  whole  different  set  of  tech¬ 


nologies  and  business  processes  to  make 
them  work. 

Object-finding.  Documents  aren’t  the 
only  targets  for  search  engines.  Pictures, 
video,  audio,  structured  records  —  all 
can  be  found  through  text  search.  Text 
search  for  structured  records  is  particu¬ 
larly  important.  It’s  central  to  online 
catalog  sales,  and  it’s  also  crucial  to  a 
number  of  compliance  initiatives  that 
are  hastening  the  adoption  of  text  tech¬ 
nology. 

Knowledge  (re)discovery.  Search  technol¬ 
ogy  and  its  use  may  be  primitive,  but 
most  enterprises  are  at  least  making 
efforts  in  those  areas.  Knowledge  ex¬ 
traction  and  text  mining  are  equally  im¬ 
portant,  however,  and  many  companies 
haven’t  even  begun  to  consider  them. 
Much  like  search,  text  mining  can  be 
applied  to  almost  any  area  of  a  business 
—  customer  communication,  marketing 
analysis,  engineering,  HR  and  plenty 
more.  And  the  same  goes  for  more  tar¬ 
geted,  less  statistical  forms  of  informa¬ 
tion  extraction  as  well. 

Regulatory  compliance.  One  group  of  text 
applications  deserves  particular  atten¬ 
tion:  those  that  can  help  you  obey  the 
law.  Regulatory  mandates  for  text  com¬ 
monly  come  in  two  kinds.  One  is  simply 
document  collection  and  retention,  to 
be  done  as  completely,  securely,  cost- 
effectively  and  searchably  as  possible. 
The  other  is  risk  monitoring.  Whether 
they’re  checking  for  internal  fraud  (for 
the  Sarbanes-Oxley  Act),  automotive 
malfunctions  (the  TREAD  Act)  or  drug 
side  effects,  companies  increasingly  have 
the  legal  duty  to  act  upon  signs  of  trou¬ 
ble,  no  matter  what  form  those  signs  first 
appear  in.  And  without  text  analytics, 
even  recognizing  those  signs  in  the  first 
place  is  an  expensive  manual  process. 

I’m  running  out  of  space  here,  so  I’ll 
leave  the  actual  technical  road  map  for 
the  next  column.  But  as  a  sneak  preview, 
you  can  find  a  lot  of  the  pieces  at  www. 
texttechnologies.com,  along  with  other 
discussion  of  text  analytics  issues. » 

WANT  OUR  OPINION?  ~~ 

OFor  more  columns  and  links  to  our  archives  go  to: 

www.computerworld.com/columns 


CURT  A.  M0NASH  is  a 

consultant  in  Acton,  Mass. 
You  can  reach  him  at 

curtmonash@monash.com. 
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sor  who  heads  a  master's  program  in  computer 
information  systems  at  Missouri  State  University 
in  Springfield. 

Blame  for  the  decline  is  attributed  to  several 
factors:  the  collapse  of  the  dot-com  bubble,  fears 
about  offshore  outsourcing  and  slack  overall  IT 
job  growth. 

Jay  Vegso,  who  prepared  the  CR  A’s  report  on 
enrollment  an§graduate  trends,  said  |fpment$ 
are  showing  a  “delayed  reaction  to  the  2001-2002 
slowdowns  in  the  tech  sector.”  Because  of  this  tag, 
computer  science  enrollments  are  usually  out  of 
sync  with  technology  sector  needs,  he  said. 

-Patrick  Thibodeau 

Thibodeau's  full  report,  “As  Outsourcing  Gathers 
Steam,  Computer  Science  Interest  Wanes,"  can  be 
found  on  Computerworld.com. 


Meanwhile,  on  the  Job 


There’s  new  evidence  that  IT  workers  are  happy  campers. 

IT  Workers  All  Workers 


Somewhat  or  very  satisfied  with  their  pay  and  benefits  78%  72% 

Expect  to  make  more  money  this  year  than  last  year  57%  41% 

Received  a  raise  within  the  past  six  months  46%  33% 

Raise  was  based  on  performance  47%  35% 


Source:  Hudson  2006  Compensation  and  Benefits  Report,  a  June  survey  of  10,000 workers  in  all  sectors,  440  of  whom  work  in  IT 


CS  Enrollment: 
Out  of  Sync 

What's  behind  the  declining  interest  among 
U.S.  college  students  in  computer  science?  The 
Washington-based  Computing  Research  Asso¬ 
ciation  (CRA)  recently  reported  that  the  number 
of  bachelors  degrees  in  computer  science  at 
Ph.D.-granting  universities  fell  17%  from  the 
2003-04  academic  year  to  11,808  in  2004-05. 
Those  schools  represent  about  30%  of  the  total 
undergraduate  population  in  the  U.S.  The  same 
trend  may  also  be  affecting  academic  programs 
that  combine  business  and  IT  skills  training. 

“It’s  almost  like  somebody  flipped  a  switch  on 
the  undergrads,”  said  David  Meinert,  a  profes- 
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TITLE  IT  director 

ORGANIZATION:  City  of 

Norfolk,  Va. 

Cluff  is  this 
month’s  guest 
Premier  100 
IT  Leader,  an¬ 
swering  read¬ 
ers’  questions 
about  educa¬ 
tion  choices 
and  career  directions.  If  you  have 
a  question  that  you’d  like  to  pose 
to  one  of  our  Premier  100  IT 
Leaders,  send  it  to  askaleader® 
computerworld.com  and  watch 
for  this  column  each  month. 


I’d  like  to  jump-start  my  career  with 
new  certifications.  Is  e-learning  viable, 
or  should  I  go  with  classroom  training? 

Certifications  are  nice  and 
sometimes  required  for  certain 
technical  positions.  When  I  hire 
people,  however,  certifications 
aren’t  “qualifiers.”  In  fact,  none 
of  the  job  descriptions  for  my  IT 
shop  calls  for  a  college  degree; 
instead,  they  all  stipulate  “college 
degree  or  equivalent  related  ex¬ 
perience.”  More  and  more,  we  are 
looking  at  talent  rather  than  skills 
and  knowledge.  We  can  develop 
skills  and  teach  knowledge,  but 
someone  who  isn’t  inclined  to  be 
a  technologist  isn’t  going  to  learn 
to  be  one.  These  are  the  kinds  of 
things  I  advise  you  to  express  on 
your  resume.  Obviously,  one  way 
to  make  the  talent  point  is  with 


certifications  in  your  area  of  inter¬ 
est.  I  couldn’t  care  less  where  or 
how  you  attained  them. 

I  am  graduating  from  an  IT  manage¬ 
ment  program  in  Toronto  and  looking 
for  my  first  job.  So  far,  I  have  not  been 
getting  a  response.  Any  suggestions  on 
finding  entry-level  work  in  IT? 

Offer  to  work  for  free  in  a  local 
municipal  or  school  IT  shop.  Then 
put  your  head  down  and  work 
your  tail  off.  Nothing  answers  the 
question  of  ability  like  previous 
experience. 

I  have  10-plus  years  of  experience  in 
databases  (DBA,  support,  etc.).  I  have 
worked  on  ERP,  CRM  and  other  proj¬ 
ects  and  have  spent  more  than  three 
years  in  SAP  environments.  With  out¬ 
sourcing  and  cost-cutting  so  prevalent 
today,  should  I  get  more  experience  in 
SAP  plus  databases,  concentrate  pure¬ 
ly  on  databases  or  do  something  else? 
The  most  important  thing  is  to 
choose  one  thing  —  it  doesn’t 
matter  what.  None  of  the  things 
you  are  experienced  in  is  likely 
to  go  away  anytime  soon.  Don’t 
fret  over  it  any  longer.  Just  decide 
right  this  second.  It’s  that  easy. 

By  choosing,  you  accomplish  two 
things:  You  learn  to  trust  your 
“natural  knowing,”  and  you  know 
exactly  what  to  do  next.  As  long 
as  you  are  vacillating,  you  are  like 
a  sailboat  with  no  wind. 

Choosing  one  thing  doesn’t 
mean  you  can’t  change  your 
mind  later  if  you  discover  that 
the  direction  you  chose  isn’t 
what  you  expected  it  to  be.  It  just 
means  that  you  are  progressing 
all  the  time. 
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Microsoft  PDF 

gin  migrating  state  employees 
to  ODF  by  Jan.  1,  2007. 

The  Word  plug-in  is  ex¬ 
pected  by  December,  with 
similar  plug-ins  for  Excel  and 
PowerPoint  anticipated  in 
2007,  according  to  Jean  Paoli, 
Microsoft’s  general  manager 
for  interoperability  and  XML 
architecture. 

The  Belgian  and  Danish 
governments  both  announced 
last  month  that  they  will  move 
to  ODF,  a  free  XML  file  format 


approved  by  the  International 
Standards  Organization  (ISO) 
in  May. 

Norway  and  France  are 
also  considering  ODF,  which 
proponents  argue  is  better  at 
ensuring  long-term  accessibil¬ 
ity  to  documents  and  opens 
the  door  for  organizations  to 
use  alternative  productivity 
software,  including  Sun  Mi¬ 
crosystems  Inc.’s  StarOffice 
and  OpenOffice.org’s  offering. 

Belgian  officials  praised  the 
Microsoft  move.  “This  is  an 
important  commitment  re¬ 
garding  software  interopera¬ 
bility.  Hence,  we’re  extremely 


pleased  by  this  announcement 
by  Microsoft,”  said  Peter  Van- 
velthoven,  Belgium’s  minister 
of  employment  and  comput¬ 
erization. 

Three  companies  are  work¬ 
ing  on  the  Microsoft-sponsored 
plug-ins:  Paris-based  Clever 
Age,  which  has  written  most 
of  the  code  thus  far;  Bangalore, 
India-based  Aztec  Software 
Inc.,  which  will  test  it;  and 
Saarland,  Germany-based 
Dialogika  GmbH,  which  will 
test  and  help  implement  the 
finished  plug-ins.  The  plug-ins 
are  expected  to  have  “batch” 
capabilities  so  that  users  can 
convert  multiple  files  at  a  time. 

Until  now,  Microsoft  has 
publicly  declined  to  support 
any  moves  toward  making 
OpenXML  compatible  with 
ODF,  saying  that  doing  so 
would  stifle  its  own  innova¬ 
tion.  But  Robertson  acknowl¬ 
edged  that  the  company  had 
been  discussing  that  option 
with  government  customers 
for  months. 

Besides  providing  an  un¬ 
specified  amount  of  funding, 
Microsoft  will  offer  technical 
assistance.  In  other  words,  the 
project  is  fully  open-source 
and  not  run  by  the  company. 

“Clever  Age  is  the  owner  of 


ODF  Plug-Ins 
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List  of  converters  between  Microsoft  Office  and  OpenDocument 


DEVELOPER(S) 

■  Clear  Age,  Aztec  Soft¬ 
ware  and  Dialogika  (all 
funded  by  Microsoft) 

■  Sun  Microsystems 


■  The  OpenDocument 
Foundation  Inc. 


Media  Entities  Inc. 


Tonic  Systems  Inc. 


TYPE  OF  CONVERTER  OR  PLUG-IN 


Word  plug-in  by  end  of  2006; 
plug-ins  for  Excel  and  PowerPoint 
in  2007 


Office  plug-in  and  Web  service  that 
can  convert  multiple  files  at  a  time 


Word  and  Excel  plug-ins  in  beta; 
PowerPoint  plug-in  in  development 


Word-to-ODF  converter  is  available 


A  PowerPoint  converter  that  could 
add  ODF  feature 
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N.J.  IT 

He  said  those  services 
are  “the  glue”  that  is  holding 
state  and  local  governments 
together. 

“That’s  something  I  watch  on 
an  hourly  basis,”  Ebeid  added. 

Once  operations  return  to 
normal,  Ebeid  will  review 
the  response.  “I  think  we 
can  probably  learn  from  this 
and  hopefully  document  the 
decision-making  process  . . . 
so  that  you  try  to  bring  some 
order  to  the  chaos,”  he  said. 

Important  steps  include  hav¬ 
ing  a  clear  chain  of  command 
so  employees  aren’t  making 
decisions  on  their  own,  said 
Ebeid.  “There  is  a  very  clear 


and  deliberate  process  from 
the  top  on  what  essential  ser¬ 
vices  you  have  to  support,  and 
the  folks  on  the  front  line  have 
to  be  very  clear  on  what  their 
next  set  of  actions  are,”  he  said. 
“There  is  very  little  room  for 
error,  and  there  is  no  margin 
for  delay.” 

Postmortem  Assessment 

Otto  Doll,  the  CIO  of  South 
Dakota  and  a  past  president 
of  the  National  Association  of 
State  Chief  Information  Of¬ 
ficers,  said  he  would  be  inter¬ 
ested  in  seeing  a  postmortem 
on  the  how  the  New  Jersey  IT 
department  responded  to  the 
budget  crisis. 

“It  sort  of  is  a  worst-case 
pandemic  influenza  scenario,” 
where  large  numbers  of  staff¬ 


ers  are  lost,  said  Doll  — 
though,  he  added,  “obviously, 
they  have  the  opportunity  to 
choose  who  they  lose.”  But  the 
real  question,  he  said,  is  how 
the  shutdown  affected  services. 
Were  state  services  affected 
“because  that’s  what  you  politi¬ 
cally  wanted  to  do,  or  you  just 
[couldn’t]  function?”  he  asked. 

Doll  said  he  would  like  to 
know  which  state  services 
were  automated  and  thus 
continued  to  be  offered.  For 
instance,  in  South  Dakota,  a 
resident  can  order  a  fishing 
licensing  online,  pay  for  it 
and  print  it  out  on  his  home 
computer. 

“That  was  the  whole  hope  of 
e-government,”  he  said.  “We 
weren’t  going  to  need  all  these 
people  to  process  this  stuff.”  * 


the  project,  but  as  in  any  good 
open-source  project,  anyone 
can  participate,  anyone  can 
modify  or  develop  on  top  of  it. 
We  are  not  a  gatekeeper  in  any 
way,”  Paoli  said.  The  plug-ins 
will  work  with  the  upcoming 
Office  2007,  as  well  as  with 
older  versions,  he  said. 

Paul  DeGroot,  an  analyst  at 
Kirkland,  Wash.-based  Direc¬ 
tions  on  Microsoft,  said  that 
while  Microsoft’s  move  was 
“inevitable,”  it  goes  against 
the  company’s  normal  tactics. 
“One  of  Microsoft’s  most  im¬ 


portant  principles  has  been 
to  control  standards,  don’t  let 
others  set  standards  for  you. 
When  that  has  happened,  they 
have  regretted  it,”  he  said. 

But  other  observers  praised 
Microsoft’s  move  to  dip  its 
toes  into  the  open-source 
waters  it  has  long  publicly 
disdained.  “I  welcome  Micro¬ 
soft  into  the  OpenDocument 
environment,”  said  Douglas 
Johnson,  corporate  standards 
program  manager  at  Sun. 
“Sometimes  zebras  get  new 
stripes.”  » 


Mass.  Senate  Panel  Criticizes 
State  IT  Division’s  ODF  Plans 


A  MASSACHUSETTS  state  Sen¬ 
ate  committee  late  last  month 
released  a  report  criticizing  the 
state's  IT  division  for  its  “unilateral" 
plan  to  force  statewide  support  for 
the  OpenDocument  format. 

The  report,  titled  "Open  Stan¬ 
dards,  Closed  Government:  ITD’s 
Deliberate  Disregard  for  Public 
Process,”  says  that  the  plan  fails 
to  evaluate  costs,  the  effect  it 
could  have  on  state  public  records 
and  possible  limitations  on  IT  ac¬ 
cessibility  for  the  disabled.  It  also 
claims  that  the  plan  ultimately 
violates  state  law. 

In  a  statement,  Felix  Browne,  a 
spokesman  for  Massachusetts  Gov. 
Mitt  Romney’s  office,  said  that  the 
committee  report  “is  wrong  on  the 
facts  and  wrong  on  the  law.  We  are 
committed  to  an  open-standards 
approach  that  fully  takes  into  ac¬ 
count  all  accessibility,  cost  and 
statutory  requirements." 

Last  September,  then-state-CIO 
Peter  Quinn  finalized  a  plan  to 
begin  migrating  by  Jan.  1, 2007,  to 
OpenDocument  formats  for  read¬ 
ing  and  saving  reports,  spread¬ 
sheets  and  presentations. 

Andy  Updegrove,  an  open- 
source  advocate  and  Boston 
lawyer,  contended  that  the  Senate 
committee’s  report  only  rehashed 
old  criticisms. 

“Certainly,  the  ITD  made  some 
mistakes,  but  there  were  two  sides 
to  this  story.  Unfortunately,  only 


one  is  reflected,"  he  said. 

Melanie  Wyne,  executive 
director  of  the  Initiative  for 
Software  Choice,  a  Washington- 
based  advocacy  group  managed 
by  CompTIA,  said  the  report 
echoes  her  organization's  point 
of  view.  The  plan  “never  defined 
what  was  open;  they  just  picked 
a  certain  technology,”  she  said. 
“It’s  a  technology  mandate  by 
another  name.” 

The  report  recommends  delay¬ 
ing  the  switch  to  OpenDocument 
until  backers  show  that  disabled 
users  can  access  documents  in 
the  OpenDocument  format. 

Sun  Microsystems,  a  strong 
backer  of  OpenDocument,  late 
last  month  demonstrated  to 
state  officials  a  Sun  plug-in  that 
lets  Microsoft  Office-compat¬ 
ible  software,  such  as  Dragon 
NaturallySpeaking  from  Nuance 
Communications  Inc.,  convert 
OpenDocument  files  from  text  to 
speech,  said  Douglas  Johnson, 
Sun's  corporate  standards  pro¬ 
gram  manager. 

Barbara  Lybarger,  general  coun¬ 
sel  for  the  Massachusetts  Office 
on  Disability,  confirmed  that  Sun’s 
plug-in  “performed  very  well”  in 
the  demonstration.  But  she  added 
that  the  “devil  is  in  the  details"  and 
called  for  such  potential  solutions 
to  be  properly  tested  with  handi¬ 
capped  beta  users. 
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Join  us  for  two  days  this  September  to  ensure 
your  company  stays  off  the  front  page. 


The  premier  enterprise  security  summit  designed  to  address  the  converging 
business  and  technology  challenges  facing  CIOs,  CSOs  and  IT  Leaders. 

Brought  to  you  by  IDG,  the  publisher  of  CIO,  Computerworld,  CSO,  InfoWorld 
and  Network  World,  The  Security  Standard  is  the  first  and  only  forum  to  bring 
together  the  visionaries  and  the  views  to  help  you  leverage  security  as  a 
competitive  advantage.  You'll  listen  to  key  stakeholders  from  within  and  outside 
the  organization  as  they  debate  the  most  pressing  cultural,  political,  business  and 
technical  challenges  facing  security  professionals  today. 


management  including  how  to 


•  Identify  Effective  Risk  Management  Strategies 
Choose  the  Right  Technology  Strategies 
Understand  How  Security  Influences  the  Business 
Explore  Perceptions  Beyond  the  Organization 
Evaluate  the  New  Threat  Landscape 
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John  Chambers,  President  and  CEO 
Cisco  Systems 

Welcome  Address 

Patrick  J.  McGovern,  Founder  and  Chairman 
International  Data  Group 


Edward  G.  Amoroso,  CSO,  AT&T 

Scott  Blake,  CISO,  Liberty  Mutual  Insurance  Group 

Mary  Ann  Davidson,  Chief  Security  Officer, 

Oracle  Corporation 

Nenette  L.  Day,  Special  Agent/Information  Systems 
Security  Officer,  FBI 

John  D.  Halamka,  CIO,  CareGroup  Health  System 
Lloyd  Gauntlett  Hession,  Chief  Security  Officer, 

BT  Radianz,  Inc. 

Mark  Moroses,  Senior  Director,  Technical  Services 
&  Security  Officer,  Maimonides  Medical  Center 
Douglas  Smith,  Senior  Vice  President  and  Corporate 
Information  Security  and  Business  Continuity 
Executive,  Bank  of  America 
John  N.  Stewart,  Vice  President  &  Chief  Security 
Officer,  Corporate  Security  Programs  Organization, 
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Chevron 

...  and  many  more  top  security  specialists  and 
business  experts. 
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licensing  issue,”  Frantz  said. 

Imagine  his  surprise  when 
Microsoft  told  him  that  he 
faced  an  “urgent  matter”  re¬ 
quiring  his  “immediate  at¬ 
tention”  after  its  licensing 
research  team  found  Auto 
Warehousing  might  not  be 
licensed  properly. 

Frustration  and  annoyance 
followed  after  Microsoft  sent  a 
series  of  threatening-sounding 
e-mails  and  refused  to  back 
down  —  even  after  Frantz  of¬ 
fered  to  produce  detailed  pur¬ 
chase  records  at  the  sugges¬ 
tion  of  his  company’s  lawyer. 

“I  spent  a  few  sleepless 
nights,”  Frantz  said.  “How  do 
I  go  to  the  CEO  and  the  board 
and  let  them  know  Microsoft 
is  coming  down  on  us?  They 
would  raise  the  question:  ‘Why 
are  they  doing  this  if  they 
don’t  have  cause?’  ” 

No  matter  how  much  Micro¬ 


soft  insists  its  SAM  reviews 
are  not  audits,  that’s  still  how 
many  customers  perceive 
them.  Milton  Bliss,  CIO  at 
Sunwest  Management  Inc.  in 
Salem,  Ore.,  said  he  may  not 
have  to  capture  every  com¬ 
puter  on  his  network  with  a 
federal  marshal  standing  by 
—  but  “it’s  still  an  audit,”  albeit 
“a  whole  lot  friendlier  audit.” 

Bliss  said  he  initially  felt 
threatened  and  wished  Micro¬ 
soft  had  been  more  forthcom¬ 
ing  with  the  reasons  it  thought 
Sunwest  needed  to  be  audited. 
It  was  only  after  Tim  Tim¬ 
mons,  Sunwest’s  corporate 
integrity  o  cer,  contacted  a 
Microsoft  SAM  o  cial  that 
he  learned  it  might  have  had 
something  to  do  with  dis¬ 
parities  between  the  employee 
number  versus  license  counts. 

Sunwest  employs  a  staff  of 
about  8,000  across  26  states, 


The  implica¬ 
tion  is  the 
guillotine  is  about 
to  fall  on  you  if  you 
don’t  get  squared 
away. 

TIM  TIMMONS,  CORPORATE 
INTEGRITY  OFFICER. 

SUNWEST  MANAGEMENT  INC. 


yet  had  only  600  Microsoft 
O  ce  licenses  and  about  250 
Exchange  Server  mail  clients, 
according  to  Bliss.  The  com¬ 
pany  manages  senior  housing 
communities,  and  most  of 
its  caregivers  interact  with 
people,  not  computers,  he  ex¬ 
plained. 

Bliss  said  he  also  knew  his 
company  didn’t  have  a  good 
inventory  tool,  and  he  suspect¬ 
ed  that  the  company  might  be 


out  of  compliance.  So  Sunwest 
agreed  to  the  SAM  review 
with  a  Microsoft  partner. 

“The  implication  is  the  guil¬ 
lotine  is  about  to  fall  on  you 
if  you  don’t  get  squared  away,” 
said  Timmons.  “But  Microsoft 
assured  me  that  is  not  going  to 
happen.  The  only  way  we’re 
going  to  get  in  trouble  is  if  we 
found  out  that  in  fact  we  were 
lacking  some  licenses  and 
we  refused  to  purchase  the 
licenses. 

“Why  would  we  do  that?  We 
want  to  know  if  we  are  out  of 
compliance,  and  we  want  to 
make  sure  we  stay  in  compli¬ 
ance,”  Timmons  added.  After 
having  spoken  to  Microsoft 
o  cials,  he  now  views  the 
SAM  program  as  a  “win-win” 
for  both  the  customer  and  the 
vendor. 

Microsoft’s  SAM  invest¬ 
ments  have  paid  off  handsome¬ 


ly  —  in  some  countries,  the 
company  gains  $40  for  every 
dollar  spent  on  the  program, 
Rivera  said.  In  the  U.S.,  the 
ratio  is  15-1,  he  estimated. 

Rivera  was  emphatic, 
though,  that  Microsoft  was  not 
looking  for  a  specific  return 
on  investment  when  it  started 
the  SAM  program.  “Our  main 
driver,”  he  stressed,  “is  cus¬ 
tomer  and  partner  experience.” 

Paul  DeGroot,  an  analyst  at 
Directions  on  Microsoft,  said 
the  SAM  program  is  being 
driven  by  Microsoft’s  partner 
group  rather  than  by  its  licens¬ 
ing  team,  and  customers  can 
expect  the  company  to  raise 
the  profile  of  the  SAM  pro¬ 
gram  among  its  partners. 

As  it  now  operates,  the  SAM 
program  essentially  provides 
Microsoft  partners  with  free 
sales  leads.  At  the  end  of  their 
Microsoft-paid  SAM  engage- 
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Remember  when  technology 
had  the  ability  to  amaze  you? 


Believe  again. 

Now  you  can  believe  in  a  new  kind  of  IT  management.  Unified  and  simplified  to  make  your 
business  more  productive,  nimble,  competitive  and  secure. 

We  all  know  that  companies  are  demanding  more  from  IT  —  expecting  IT  to  be  a  strategic 
and  competitive  advantage.  Yet  today's  complex  IT  environments  require  you  to  manage 
across  point  solutions,  siloed  organizations  and  redundant  technology. 

A  better  alternative?  Choose  an  integrated  approach  to  IT  management.  An  approach  in 
which  software  unifies  your  people,  processes  and  technology  to  increase  efficiency  and 
optimization.  Only  one  global  software  company  can  do  that.  CA,  formerly  known  as 
Computer  Associates,  has  focused  solely  on  IT  management  software  for  over  30  years. 

Our  technology  vision  that  makes  this  promise  real  is  called  Enterprise  IT  Management, 
or  EITM.  At  its  heart  is  the  CA  Integration  Platform  —  a  common  foundation  of  shared 
services  that  gives  you  real-time,  dynamic  control  and  flexibility.  Its  greatest  benefit? 

CA  software  solutions  come  to  you  already  integrated,  and  able  to  integrate  with  your 
existing  technology  to  optimize  your  entire  IT  environment. 

Ultimately,  a  well-managed  IT  environment  gives  you  the  visibility  and  control  you  need 
to  manage  risk,  manage  costs,  improve  service  and  align  IT  investments.  To  learn  more 
about  how  CA  and  our  wide  array  of  partners  can  help  you  unify  and  simplify  your  IT 
management,  visit  ca.com/unify. 
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IT’S  SAFE  TO  SAY 

that  when  Plato  wrote 
in  The  Republic  that 
necessity  is  the  mother 
of  invention,  he  had  no 
concept  of  a  21st  cen¬ 
tury  enterprise  data  center.  If  he  had, 
he  might  have  mused  that  it’s  what 
gives  birth  to  reinvention  as  well. 

As  IT  professionals  across  the 
country  and  around  the  world  strive 
to  understand  the  promise  and  the 
challenges  of  the  next  generation  of 
information  technology,  they  recog¬ 
nize  that  nowhere  is  that  understand¬ 
ing  more  crucial  than  in  the  core  of 
their  IT  operations:  the  data  center. 

In  this  second  edition  of  the  Next- 
Gen  IT  series,  produced  jointly  by  the 
editorial  teams  of  CIO  and  Computer- 
world,  we  look  at  the  factors  driving 
what  can  very 
aptly  be  described 
as  a  reinvention 
of  the  enterprise 
data  center.  Indeed, 
that  reinvention  is 
born  of  necessity: 
the  relentless  need 
to  drive  the  business  by  cutting  costs 
and  improving  customer  service. 

It’s  clear  that  the  reinvented,  next- 
generation  data  center  will  be  a  bastion 
of  virtualization,  consolidation  and 
automation  technologies.  What  isn’t  so 
clear  is  how  best  to  address  the  dif¬ 
ficulties  —  and  even  some  anomalies 
—  inherent  in  their  implementation. 

Conventional  wisdom  suggests 
that  virtualization  enables  compa¬ 
nies  to  cut  staffing  costs,  since  there’s 
less  equipment  to  be  maintained  in 
a  virtualized  environment.  Yet  many 
CIOs  are  finding  that  those  costs  ac¬ 
tually  increase  because  the  environ¬ 
ment  is  more  complex  and  requires  a 
more  highly  skilled  staff.  Consolida¬ 
tion  by  means  of  blade  servers  may 
cut  maintenance  and  management 
expenses,  but  those  savings  can  be 
more  than  offset  by  the  cost  of  the 
energy  required  to  cool  them. 


NEXT-GEN  ONLINE 

For  the  online  edition  of 
this  publication  plus  rele¬ 
vant,  related  content  from 
CIO  and  Computerworld, 
visit  our  Web  site: 


Mother  of 

Reinvention 


We  are  confident  that  our  anchor 
stories  in  this  edition  —  “Lighting 
the  Path  to  ‘Lights  Out’”  (page  4)  and 
“Management:  The  Missing  Piece  of 
the  Puzzle”  (page  12)  —  will  spark  a 
valuable  discussion  of  what  this  essen¬ 
tial  reinvention  will  entail.  Together 
with  the  balance  of  the  issue  and  ad¬ 
ditional  content  available  on  our  Web 
site  (ITNextGeneration.com),  they 
provide  an  intriguing  glimpse  into  the 
data  center  yet  to  be  fully  conceived.  ♦ 
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EDITORS’  NOTE 


flexibility  in  the  data  center.  By  sepa¬ 
rating  software  from  the  hardware 
on  which  it  runs,  virtualization  can 
make  the  data  center  far  more  flex¬ 
ible  and  agile  in  five  ways: 

■  It  lets  you  treat  multiple  hard¬ 
ware  devices,  like  servers  or  storage 
systems,  as  one  device.  Conversely,  it 
allows  you  to  separate  individual  phys¬ 
ical  servers  into  multiple  virtual  ones, 
making  it  easier  to  scale  storage  and 
applications  up  or  down  upon  demand. 

■  It  permits  you  to  use  cheaper,  ge¬ 
neric  hardware  and  aggregate  it  into 
virtually  unified  systems  that  are 
more  cost-effective. 

■  Virtualization  makes  it  easier  to 
handle  equipment  failure  because  you 
can  move  a  virtual  environment  to 
other  available  hardware  quickly. 

■  By  treating  hardware  resources 
as  one  pool,  virtualization  lets  you 
use  that  equipment  more  efficiently, 
so  you  need  less  equipment. 

■  Outside  the  production  environ¬ 
ment,  virtualization  makes  it  easier 
to  set  up,  change  and  tear  down  test 
environments. 

Clothing  retailer  Coldwater  Creek 
Inc.  is  using  virtualization  to  reduce 
its  number  of  physical  servers,  lead¬ 
ing  CIO  Michael  Carper  to  predict 
that  he  will  be  able  to  “extend  the  life 
of  the  data  center  by  five  years.” 

At  Corrections  Corporation  of 
America  (CCA),  which  runs  about  60 
prisons,  virtualization  not  only  helps 
reduce  hardware  needs,  it  also  speeds 
provisioning  of  new  servers.  “It  takes 
just  hours  to  bring  in  additional  capac¬ 
ity,  not  days,”  says  CIO  Brad  Wood. 

Although  server  virtualization  tech¬ 
nology  is  advancing  rapidly,  there 
has  been  less  progress  on  the  storage 
side,  notes  Schreck.  That’s  because 
traditional  large-systems  vendors, 
such  as  EMC  Corp.  and  Hitachi  Data 
Systems  Corp.,  don’t  want  to  see  stor¬ 
age  become  commoditized,  says  John 
Webster,  senior  analyst  at  Data  Mo¬ 
bility  Group  LLC.  But  other  vendors, 
such  as  Symantec  Corp.  and  Kazeon 
Systems  Inc.,  now  offer  software  for 
heterogeneous  environments  that  can 
virtualize  generic  storage  systems 
and  interact  with  proprietary  systems. 

Virtualization:  Challenges 

Virtualization  technology  is  fairly 
new.  Consequently,  not  all  applica- 


The  skill  sets  change  dramatically. . . . 

We  have  fewer,  more  highly  talented  people. 

MICHAEL  CARPER,  CIO.  COLDWATER  CREEK  INC. 


tions  can  work  in  a  virtualized  en¬ 
vironment,  cautions  Kris  Dominick, 
president  of  data  center  consulting 
at  Data  Dimensions  Inc.  “You  need 
to  start  with  a  feasibility  assess¬ 
ment,”  he  says.  Today,  virtualization 
also  requires  a  restart  to  change  the 
environment,  so  it  won’t  work  to 
redistribute  computing  and  storage 
resources  automatically  on  the  fly. 

An  irony  of  the  virtualized  data  cen¬ 
ter  is  that  your  staffing  costs  could  in¬ 
crease  even  as  your  staffing  levels  de¬ 
crease,  says  Wood.  It  takes  more  skill 
and  experience  to  work  in  a  virtual¬ 
ized  environment  than  in  a  traditional 
one.  As  server  and  storage  capacity  is 
optimized,  your  buffer  is  diminished 
to  handle  fail-overs  and  unexpected 
loads.  Furthermore,  you  have  to  know 
what  resources  are  in  use  by  which 
applications  and  understand  which  re¬ 
sources  are  now  shared,  since  any  fail¬ 
ures  or  workload  rebalancing  can  af¬ 
fect  multiple  systems  simultaneously. 


“You  need  a  highly  skilled,  highly  paid 
staff  to  manage  this  more  complex 
environment,”  Wood  says.  “You  can’t 
have  just  the  generalist  anymore.” 

The  Computerworld/CIO  survey  bears 
this  out:  44%  of  respondents  say  they 
expect  to  need  a  more  highly  skilled 
staff  to  run  a  virtualized  data  center. 

The  adoption  of  virtualization  also 
raises  political  issues  for  CIOs.  In 
a  virtualized  data  center,  business 
units  may  no  longer  have  servers 
with  their  names  inscribed  on  them. 
“Virtualization  gets  a  lot  of  resistance 
[from  business  departments]  because 
it’s  shared  services.  People  don’t  play 
well  in  the  sandbox  together,”  IDC’s 
Bailey  notes.  “A  lot  of  people  like  to 
own  their  infrastructure.” 

Even  within  the  IT  department, 
virtualization  can  sometimes  bruise 
egos,  says  Schreck.  “Virtualization 
cuts  across  ownership  boundaries,”  he 
says,  leading  each  group  to  compete 
for  resources  and  campaign  for  its  own 
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Finding  tools  to  virtualize 
and  consolidate  your  data  cental 
is  easy.  What's  harder  is  finding 
the  tools  to  properly  manage 
this  new  virtualized  world. 


B 


BY  ROBERT  L.  SCHEIER 

UILDING  the 

next-generation 
data  center  is  one 
thing.  Managing  it 
will  be  another. 

Much  of  the 
technology  to 
virtualize  and  consolidate  servers, 
networks  and  storage  is  here  today 
or  on  the  way.  What  will  take  longer, 
according  to  vendors,  customers  and 
analysts,  is  automating  that  technol¬ 
ogy  to  reconfigure  itself  so  the  most 
critical  applications  or  database  que¬ 
ries  run  the  fastest.  Only  when  that 
automation  is  possible  will  data  cen¬ 
ters  deliver  on  the  promise  of  lower- 
cost  IT  capacity  that  businesses  can 
tap,  like  a  utility,  as  it’s  needed. 

IT  managers  face  “a  big  spider  web 
of  understanding  your  transactions, 
and  where  they’re  running,  and  how 
they’re  running,”  says  an  IT  man¬ 
ager  at  a  national  retail  chain  who 
requested  anonymity.  For  example, 

“I  just  did  a  big  purchase  of  an  IBM 
enterprise  service  bus.  Now,  I’ve  got 
to  see  inside  this  service  bus,  and  see 
where  the  holdup  is.  Is  it  application 
code  at  the  Web  services  level?  Is  it 
MQSeries  [messaging  middleware]? 
If  you  don’t  continually  try  to  auto¬ 
mate,  [this  work]  will  bury  you.” 

Bill  Randall,  director  of  MIS  in¬ 
frastructure  at  restaurant  chain  Red 
Robin  International  Inc.,  says  he 
hasn’t  yet  seen  an  automated  tool 
“that’s  going  to  make  a  better  decision 
than  some  of  my  engineers,”  espe¬ 
cially  when  it  comes  to  correlating 
information  coming  from  different 
parts  of  the  IT  infrastructure.  “I’m 
not  seeing  any  tools  out  there  that 
are  able  to  sift  through  that  amount 
of  data”  and  automatically  determine 
the  root  cause  and  proper  fix  for  a 
problem,  Randall  says. 

In  fact,  most  of  what  research  firm 
Gartner  Inc.  calls  “real-time  infra¬ 
structure”  products  are  “specific  to  a 
particular  problem,  such  as  horizon¬ 
tally  scaling  applications  for  a  partic¬ 
ular  platform,  and  have  limited  or  no 
visibility  of  the  end-to-end  business 
transactions,”  according  to  a  March 
2006  report.  The  key  standards  and 
supporting  products  to  enable  true 
end-to-end  dynamic  management  are 
at  least  several  years  away,  say  cus- 


July  2006 


[I  haven’t  yet  seen  a  tool]  that’s  going  to  make  a  better  decision  than  some  of  my  engineers 

BILL  RANDALL,  DIRECTOR  OF  MIS  INFRASTRUCTURE.  RED  ROBIN  INTERNATIONAL  INC. 


tomers  and  industry  observers. 

The  obstacles  facing  every  cus¬ 
tomer  will  be  unique,  and  so  will  the 
timetables  companies  follow  for  suc¬ 
cessfully  managing  the  next-genera¬ 
tion  data  center.  Here  are  some  of  the 
most  common  challenges  and  how 
some  key  vendors  are  trying  to  meet 
them. 

Beyond  Cost  Cutting 

What’s  been  driving  the  move  to  the 
next-generation  data  center?  So  far,  it’s 
mostly  been  cost  savings.  Companies 
still  recovering  from  the  dot-com  bust 
are  looking  for  ways  to  postpone  or 
avoid  the  purchase  of  new  servers, 
storage  or  software  and  minimize  the 
size  of  their  IT  staffs. 

For  example,  Randall  says  EMC 
Corp.’s  VMware  virtualization  soft¬ 
ware  has  cut  the  time  needed  to 
deploy  a  new  server  at  Red  Robin’s 
Greenwood  Village,  Colo.,  headquar¬ 
ters  from  three  to  four  hours  to  20 
minutes.  Configuresoft  Inc.’s  Enter¬ 


prise  Configuration  Manager  (ECM) 
is  also  saving  him  four  to  six  person- 
days  per  quarter  by  automating  the 
quarterly  reports  he  must  provide 
to  department  heads  about  which 
users  have  permissions  for  accessing 
or  changing  data  in  various  systems. 

At  Polaris  Industries  Inc.,  a  manu¬ 
facturer  of  snowmobiles,  all-terrain 
vehicles  and  motorcycles  in  Medina, 
Minn.,  capital  budgets  have  been  de¬ 
creasing  every  year.  “We  can’t  add 
staff,  but  there’s  more  pressure  to  add 
services,”  says  Dean  Buker,  manager 
of  network  and  systems  operations. 
By  virtualizing  Hewlett-Packard  Co. 
server  blades  with  VMware,  since 
early  2005  Buker  has  slashed  the 
number  of  physical  servers  at  Polaris 
from  120  to  70  and  reduced  the  an¬ 
nual  purchases  of  new  servers  by 
about  70%. 

The  corporate  investment  bank  at 
Wachovia  Corp.  last  year  began  using 
DataSynapse  Inc.’s  FabricServer  for 
its  transaction-oriented  applications. 


Tony  Bishop,  senior  vice  president 
and  director  of  product  management, 
says  FabricServer  has  delivered  50% 
better  performance  at  an  85%  cost 
savings.  It  has  also  allowed  Wacho¬ 
via  to  reallocate  processing  power 
among  multiple  data  centers  in  mul¬ 
tiple  locations  as  the  trading  day 
progresses  around  the  world. 

As  impressive  as  those  numbers  are, 
companies  are  demanding  more  than 
just  savings.  They  want  data  centers 
to  provide  the  flexibility  and  adapt¬ 
ability  that  will  improve  customer 
service  and  speed  the  introduction  of 
products  and  services.  In  a  May  2006 
Computerworld/CIO  survey,  nearly  as 
many  IT  executives  cited  new  capa¬ 
bilities  as  the  main  reason  to  change 
their  data  centers  (60%)  as  those  who 
cited  cost  cutting  (63%). 

Data  center  managers  are  looking 
toward  virtualization,  consolida¬ 
tion  and  automation.  Virtualization 
means  making  multiple  virtual  de¬ 
vices  appear  as  a  single  logical  device, 
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It’s  relatively  easy  to  automate 
the  provisioning  of  volumes  and 
logical  unit  numbers  in  a  single¬ 
vendor  environment,  but  it’s 
much  harder  to  do  so  over  multi¬ 
vendor  arrays.  It’s  also  difficult  to 
accomplish  across  storage  types 
(file  vs.  block). 

As  with  automation,  virtualization 
is  much  easier  in  single-vendor 
environments  than  across  arrays 
from  multiple  vendors  or  across 
network  protocols. 


Rising  storage  capacities  make 
consolidation  easier,  but  man¬ 
agement  tools  are  still  lacking. 


Over  the  next  two  to  three  years, 
vendors  are  expected  to  intro¬ 
duce  software  with  improved 
abilities  to  automatically  migrate 
storage  among  tiers  and  manage 
performance  to  meet  business 
service-level  agreements.  In¬ 
creasing  adoption  of  the  SMI-S 
interoperability  standard  will 
slowly  ease  integration  woes. 
Vendors  will  work  to  integrate 
server,  network  and  storage 
management  in  fewer  consoles. 
True  single-console  management 
across  vendors  isn’t  expected 
until  at  least  2008. 


STORAGE 


SERVERS 


Some  tasks,  such  as  restarting 
failed  processes,  can  be  auto¬ 
mated  through  existing  manage¬ 
ment  tools  but  might  require 
scripting.  Management  vendors 
are  still  building  capabilities  to 
automate  configuration  and 
network/storage  connections  in 
virtualized  environments. 

Processor-level  virtualization  is 
becoming  a  commodity;  growth 
is  in  tools  to  provide  security, 
management  and  auditability  for 
virtual  server  environments. 


Virtualization  reduces  costs 
by  up  to  85%  by  eliminating 
underutilized  servers  and  trim¬ 
ming  licensing  and  manage¬ 
ment  costs. 


Virtualization  and  consolidation 
will  become  even  more  common 
over  the  next  12  to  18  months 
as  server  vendors  roll  out  more- 
powerful,  multicore  processors. 
Vendors  will  work  to  integrate 
server,  network  and  storage 
management  in  fewer  consoles. 
True  “single-console”  manage¬ 
ment  across  vendors  isn’t  ex¬ 
pected  until  at  least  2008. 


NETWORKS 


Simple  network  manage¬ 
ment  and  monitoring  tools 
are  common,  but  manag¬ 
ers  are  reluctant  to  give 
up  control  for  higher-level 
changes. 


Many  vendors  provide  vir¬ 
tualization  at  the  network 
level  (such  as  virtualized 
file  systems).  Virtualization 
of  the  network  itself  (such 
as  virtual  LANs)  has  been 
maturing  for  several  years. 

Many  users  consolidate 
voice  and  data  networks 
using  VoIP,  but  virtualiza¬ 
tion  is  used  more  to  tune 
virtual  networks  for  spe¬ 
cific  applications  than  to 
reduce  bandwidth. 

Vendors  will  work  toward 
more  automated  and  policy- 
based  management  that 
links  network  performance 
to  business  needs.  Initial 
products  are  available 
now;  increased  adoption 
is  expected  over  the  next 
two  to  three  years.  Vendors 
will  also  work  to  integrate 
server,  network  and  stor¬ 
age  management  in  fewer 
consoles.  True  single¬ 
console  management 
across  vendors  isn’t  ex¬ 
pected  until  at  least  2008. 


CoreFirst  examines  queries  within 
databases  to  find  those  that  use  too 
many  CPU  cycles,  too  much  memory 
or  too  much  of  the  server’s  I/O  sub¬ 
system,  says  the  IT  manager  at  a 
leading  retailer.  It  can  also  prioritize 
workloads  so  that  a  query  from  a  ca¬ 
shier  looking  up  the  price  for  a  prod¬ 
uct,  for  example,  gets  higher  priority 
than  a  query  about  last  month’s  sales. 

A  leading  health  care  provider  in 
the  Midwest  deployed  CoreFirst  to 
troubleshoot  performance  problems 


within  a  complex,  fat-client  customer- 
service  application  that  gathers  data 
from  multiple  other  applications. 

“We  can  take  our  application  and 
almost  break  it  down  by  the  busi¬ 
ness  function”  an  employee  is  using, 
such  as  the  time  required  to  look  up  a 
customer  record,  says  the  company’s 
director  of  technology  support,  who 
declined  to  be  identified. 

Virtualization  may  simplify  some 
functions,  but  it  complicates  others, 
says  Dennis  Moreau,  chief  technol¬ 


ogy  officer  at  Configuresoft.  Config- 
uresoft’s  ECM,  for  example,  can  help 
ensure  that  new  virtual  servers  meet 
corporate  and  regulatory  guidelines 
for  security  and  access  control,  are 
properly  configured,  and  have  the 
proper  versions  of  software  and  the  ap¬ 
propriate  security  patches.  By  the  mid¬ 
dle  of  next  year,  Configuresoft  plans 
to  give  users  the  ability  to  check  the 
status  and  configuration  of  instances 
of  an  operating  system  that  exist  on  a 
server  but  are  not  yet  in  operation. 
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How  do  you  maximize 
the  value  of  IT? 


IT  is  still  one  of  the  most  misunderstood  functions  in  business. 

The  CIO  Executive  Council,  a  professional  community  developed  by  CIOs,  has  focused  its  members' 
collective  effort  on  this  challenge.  Their  initiative  has  resulted  in  groundbreaking  tools-the  IT  Value 
Matrix  and  Knowledge  Center™-to  help  leverage  the  value  of  IT  throughout  the  organization. 

The  IT  Value  Matrix  illustrates  the  principles  and  practices  essential  to  creating,  identifying  and 
communicating  IT's  value  to  the  enterprise.  Its  online  Knowledge  Center  provides  best  practices 
contributed  by  Council  members,  supplemented  by  case  studies  and  how-  to  articles  from 
CIO  magazine  that  are  grouped  in  categories  that  correspond  to  all  the  components  of  the  Matrix. 


T  Value  Matrix1 


Visit  www.cioexecutivecouncil.com/it_value  to  get  your  own  copy  of  the  Matrix  and 
to  watch  the  IT  Value  webcast,  presented  by  Agriliance  CIO  and  Council  member  Steven  John. 


CIO  Executive  Council 

The  Professional  Organization  for  CIOs 


The  CIO  Executive  Council  was  created  by  readers  of  CIO  magazine  and  leaders  within 
the  community  of  CIOs  to  leverage  the  individual  and  collective  strengths  of  its  members  by 
serving  as  unbiased  and  trusted  advisors  to  each  other,  and  by  advancing  the  CIO  role  and 
profession.  In  just  two  years,  more  than  300  CIOs  worldwide  from  various  sectors  and  indus¬ 
tries  have  identified  with  the  Council's  vision  and  committed  to  assist  each  other,  cultivate 
their  own  careers  and  those  of  their  team,  and  advance  the  role  of  the  CIO. 

To  inquire  about  membership,  visit  www.cioexecutivecouncil.com. 
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Got  Questions  About 
Accelerating  Business  Agility? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


In  today's  competitive  marketplace,  executives 
are  continually  challenged  to  quickly  capitalize  on 
business  and  market  opportunities  before  profit 
margins  drop.  IT  agility  is  imperative  since 
companies  can’t  move  forward  without  enabling 
technologies.  Learn  how  you  can  optimize  your 
organization’s  ability  to  move  quickly  from  users 
who  have  implemented  agile  IT  best  practices. 

Apply  to  attend  Computerworld's  complimentary* 
half-day  IT  Executive  Summit:  IT  Best  Practices 
for  Accelerating  Business  Agility. 


August  15,  2006  •  Chicago,  Illinois 

Metropolitan  Club  •  Oak  Room  •  Sears  Tower,  66th  Floor 

8:30am  to  Noon 


IT  Best  Practices  for  Accelerating 
Business  Agility 


8:00am  to  8:30am 


Registration  and  Networking  Breakfast 


8:30am  to  8:45am 


8:45am  to  9:30am 


Introduction  and  Overview 

Don  Tennant,  Vice  President  and  Editor  in  Chief,  Computerworld 


E  Moving  Towards  the  Agile  Enterprise 

Michael  Hugos,  Fomer  CIO,  and  Author  of  Essentials  of  Supply 
Chain  Management  and  Building  the  Real  Time  Enterprise:  An 
Executive  Briefing 


9:30am  to  9:45am 


IT  End  User  Case  Study:  Maryland  Automobile  Insurance  Fund 

Cindy  Hughes,  Chief  Information  Officer  and  Director  of  IT, 

Maryland  Automobile  Insurance  Fund  (MAIF) 


10:00am  to  10:15am  Refreshment  and  Networking  Break 


10:15am  to  10:45am  IT  End  User  Case  Study:  Motorola 

Toby  Redshaw,  Corporate  Vice  President  of  IT  Strategy,  Architecture  and 
eBusiness,  Motorola 


*  Complimentary  registration  is  restricted  to  qualified 
IT  directors  and  managers  only. 

Apply  for  registration  today 

Contact  Jean  Lee  at  888-299-0155 

or  visit:  www.itexecutivesummit.com 


10:45am  to  1 1:15am 


a  IT  End  User  Case  Study:  TD  Ameritrade 

Gary  Greenwald,  Chief  Technology  Officer,  TD  Ameritrade 


1 1 :1 5am  to  Noon 


Panel  Discussion 

Moderator:  Don  Tennant,  Vice  President  and  Editor  in  Chief,  Computerworld 
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Users  Struggle  on  Road  to  Cisco  Certification 


The  testing  is  a  rite  of  passage  that  calls 
for  long  preparation  by  engineers 


BY  MATT  HAMBLEN 

N  A  dimly  lit  hallway  of 
the  cavernous  Las  Vegas 
Convention  Center  late 
last  month,  three  Cisco 
Systems  Inc.  customers  were 
fretting  over  a  networking  cer¬ 
tification  exam  they  had  just 
finished. 

“Dang,  it’s  like  finals  week 
at  college,”  said  one  man.  A 
woman  in  the  trio  shook  her 
head;  the  second  man  in  the 
group  groaned.  They  turned 
to  walk  slowly  out  of  the  con¬ 
vention  complex  into  the  105- 
degree  Vegas  afternoon,  arms 
wrapped  around  one  another’s 
shoulders  in  consolation. 

Taking  a  Cisco  certification 
exam  is  serious  stuff. 

The  winners  get  a  plaque 
and  a  Cisco  Certified  Inter¬ 
network  Expert  (CCIE)  iden¬ 
tification  number  for  success¬ 
fully  completing  the  toughest 
level  of  tests;  they  can  use  that 
number  on  business  cards 
and  resumes  to  enhance  their 
earning  potential.  The  losers 
—  historically  a  significant 


majority  of  test  takers  —  are 
sometimes  out  more  than 
$10,000  for  travel,  books,  prep¬ 
aration  classes  and  the  testing 
fee,  according  to  several  at¬ 
tendees  at  Cisco’s  Networkers 
2006  user  event. 

The  event  featured  dozens 
of  intense  training  sessions  on 
the  latest  Cisco  hardware  and 
software,  as  well  as  a  keynote 
address  by  CEO  John  Cham¬ 
bers.  But  the  main  event  for 
thousands  at  the  conference 
was  the  chance  to  take  a  stan¬ 
dardized  certification  test. 

Jon  Campbell,  CIO  at 
FirstHealth  of  the  Carolinas 
Inc.  in  Pinehurst,  N.C.,  said  he 
had  been  prepping  all  week  in 
his  hotel  room  for  a  CCIE  test 
on  network  security. 

“The  tests  are  tough,  and 
the  ones  who  pass  are  really 
the  creme  de  la  creme,”  said 
Campbell,  who  has  taken 
certification  tests  from  three 
other  major  vendors  but  found 
Cisco’s  to  be  the  toughest  by 
far.  He  should  know.  After 
passing  an  earlier  Cisco  certi¬ 


fication  written  exam,  Camp¬ 
bell  failed  the  lab  test  several 
weeks  later.  “I  thought  that  I 
had  it  after  the  written,  but 
then  I  took  the  lab,”  he  said. 
“Oh  boy.” 

A  Cisco  Web  site  recom¬ 
mends  using  seven  textbooks 
to  prepare  for  the  two-hour 
written  CCIE  security  exam. 
For  the  lab  test,  the  online  test¬ 
ing  rubric  lists  more  than  100 
devices,  software  and  security 
attacks  that  engineers  must  be 
prepared  to  troubleshoot. 

A  Cisco  spokeswoman  said 
that  2,808  people  took  tests  at 
Networkers,  paying  fees  up  to 
$350.  Many  who  preregistered 
for  the  test  were  able  to  take  it 
for  free.  The  written  test  is  fol¬ 
lowed  by  an  eight-hour  practi¬ 
cal  lab  test,  which  takes  place 
at  a  separate  location.  CCIEs 
must  take  the  written  test  ev¬ 
ery  two  years  to  stay  qualified; 
they  need  to  pass  the  lab  test 
only  once. 

Several  engineers  taking 
last  month’s  exam  said  reach¬ 
ing  the  CCIE  level  can  lead  to 
better  job  assignments,  pay 
raises  and  perhaps  an  easier 
pathway  to  another  job,  be¬ 
cause  managers  understand 


Cisco  Certification 

■  About  12,000  people  take 
the  written  exam  every  year. 

■  Around  9,000  people  take 
the  lab  test  every  year. 

■  About  26%  of  those  who 
have  taken  the  written  test 
since  1993  have  passed. 

■  About  26%  of  those  who 
have  taken  the  lab  test  since 
1993  have  passed. 

■  Today,  there  are  fewer  than 
14,000  CCIEs  worldwide. 

SOURCE  CISCO  SYSTEMS  INC  . 


the  value  of  the  certification. 

Jason  Witty,  director  of  IT 
for  Southern  Wine  and  Spirits 
in  Miami,  said  he  recently 
opened  a  new  warehouse 
with  wireless  and  other  com¬ 
munications  technology  with 
the  help  of  a  CCIE  assigned 
to  the  project  by  IBM  under  a 
consulting  contract.  The  CCIE 
was  able  to  train  technical 
staffers  and  helped  prepare  the 
warehouse  launch,  Witty  said. 
“He  was  a  lifesaver,”  he  added. 

Some  engineers  at  Network¬ 
ers  avoided  the  exams  but  still 


took  advantage  of  the  courses. 
Franz  Hufnagl,  network  sys¬ 
tems  manager  in  the  Stanley, 
N.C.,  office  of  Julius  Blum  Inc., 
a  maker  of  cabinet  hardware, 
said  he  probably  would  never 
take  a  CCIE  exam  but  chose 
to  attend  Networkers  for  the 
high-quality  courses.  The 
native  of  Austria  said  that  in 
much  of  Europe,  certifications 
aren’t  as  widely  revered  as 
they  are  in  the  U.S. 

In  fact,  he  suggested  that 
some  companies  may  be  urg¬ 
ing  workers  to  get  certifica¬ 
tions  in  the  hopes  that  they 
will  get  special  consideration 
from  Cisco,  such  as  having 
their  calls  for  help  get  an¬ 
swered  more  quickly. 

Wu  Zhou,  an  analyst  at  IDC, 
said  the  certification  programs 
are  at  the  center  of  Cisco’s 
highly  profitable  services  divi¬ 
sion,  which  in  the  last  quarter 
brought  in  more  than  $1  billion 
in  revenue  with  a  gross  profit 
of  68%.  Cisco  customers  who 
take  certification  classes  are 
more  likely  to  fix  their  own 
problems,  reducing  Cisco’s 
services  costs,  Zhou  said,  not¬ 
ing  that  “services  at  Cisco  are 
highly  leveraged.”  ► 


CA  Unveils  Bundle  to  Automate  ITIL  Process 


BY  MATT  HAMBLEN 

CA  Inc.  late  last  month 
brought  out  a  package  of  soft¬ 
ware,  services  and  training 
programs  to  help  implement 
best  practices  for  managing  IT 
shops  under  the  Information 
Technology  Infrastructure 
Library  (ITIL)  framework. 

The  new  CA  Service  Man¬ 
agement  Accelerator  offering 
aims  to  formalize  and  expand 
CA’s  ITIL- related  products 
and  services,  said  David  Hur¬ 
witz,  vice  president  of  product 
marketing  for  business  service 
optimization.  “CA  customers 
want  to  move  up  the  ITIL  ma¬ 
turity  curve  more  than  ever. 
ITIL  is  very  hot  right  now,” 
Hurwitz  said. 

'  The  U.K.  Office  of  Govern¬ 
ment  Commerce  developed 


the  ITIL  model  in  the  mid- 
1980s.  ITIL  contains  standard 
descriptions  for  key  processes 
needed  to  improve  IT  service 
management,  but  it  does  not 
offer  ways  to  deploy  the  proc¬ 
esses,  Hurwitz  said.  “The  ap¬ 
proach  at  CA  is  that  automat¬ 
ing  ITIL  is  the  quickest  route 
to  ROI,”  he  added. 

Two  CA  customers  said  they 
have  embraced  ITIL  best  prac¬ 
tices  and  are  glad  to  see  CA 
move  to  further  the  philoso¬ 
phy,  but  neither  plans  to  im¬ 
mediately  implement  any  part 
of  the  new  bundled  offering. 

Fran  Findley,  a  project  man¬ 
agement  analyst  at  MultiCare 
Health  System,  said  that  when 
the  Tacoma,  Wash.-based 
health  care  provider  picked 
CA’s  software  three  years  ago, 


it  was  “the  perfect  time  to 
change  the  culture  around  IT 
in  line  with  ITIL.”  MultiCare’s 
set  of  CA  applications,  includ¬ 
ing  the  Unicenter  Service 
Desk  offering,  works  well 
within  the  ITIL  model,  said 
Robyn  Brooks,  an  IT  man¬ 
ager  at  MultiCare,  which  runs 
three  hospitals  and  60  clinics. 

“But  we’re  still  in  our  in¬ 
fancy,”  Brooks  said.  Eventually, 
cost  savings  in  IT  investments 
will  be  a  byproduct  of  the  ITIL 
effort,  she  said. 

Daren  Thayne,  chief  technol¬ 
ogy  officer  at  MyFamily.com 
Inc.,  said  the  Provo,  Utah- 
based  company  has  used  ITIL 
to  define  IT  management  best 
practices,  and  one  result  has 
been  a  change  in  the  way  IT 
teams  are  structured. 


“CA  has  provided  us  with  all 
the  solutions  and  support  we 
need  to  automate  these  essen¬ 
tial  ITIL  processes,”  he  said  in 
a  statement. 

MyFamily.com  uses  CA 
tools  to  help  manage  about 
4,000  servers  that  provide 
digital  census  information  to 
the  public  for  a  fee,  said  Eric 
Martineau,  vice  president  of 
Web  operations  at  the  com¬ 
pany,  which  provides  online 
genealogy  tools,  among  other 
offerings. 

New  Software  Included 

In  addition  to  bundling  exist¬ 
ing  software,  services  and 
training,  the  CA  Service 
Management  Accelerator  of¬ 
fering  includes  a  new  software 
product,  Configuration  Man¬ 
agement  Database  rll,  which 
ships  in  August,  Hurwitz 
said.  Pricing  has  not  been  an¬ 


nounced.  The  new  tool  will 
work  within  the  existing  CA 
Management  Database  rll  to 
consolidate  disparate  sources 
of  IT-related  data  and  present 
graphical  views  of  configura¬ 
tion  information  on  servers, 
switches  and  even  applica¬ 
tions,  he  said. 

The  bundled  offering  also 
adds  14  ITIL  training  pro¬ 
grams  to  the  four  now  avail¬ 
able,  Hurwitz  said. 

In  general,  the  ITIL  frame¬ 
work  has  been  hard  for  busi¬ 
nesses  to  implement,  and  CA’s 
Accelerator  will  help  compa¬ 
nies  “do  things  themselves” 
rather  than  rely  on  consul¬ 
tants,  said  Rich  Ptak,  an  ana¬ 
lyst  at  Ptak,  Noel  &  Associates 
in  Amherst,  N.H.  Ptak  said  CA 
and  BMC  Software  Inc.  have 
been  the  market  leaders  in 
providing  ITIL  implementa¬ 
tion  aids.  * 


How  paper  from  Oberkirch  reaches  the 
four  corners  of  the  globe,  Without  interrujtticStl 

The  Koehler  Group  in  Oberkirch,  Germany  is  one  of  the  world's  largest  makers  of  specialty- 
paper;  used  to  make  everything  from  airline  tickets  to  Pokemon  cards.  Managingrtheir, 
output  takes  continuous  24/7  production-and  HP  integrity  servers  with  Intel  Itanium  2 
processors.  "We  produce  and  ship  over  1,500  tons  of  paper  each'  day.  A  moment  of 
downtime  means  production  must  stop/'  says  Bruno  0.  Schwelling,  CFO.  "Itanium-based  -3 
HP  Integrity  systems  have  virtually  eliminated  that  fear. 
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Don't  let 

a  trading  partner's 
failure  disappoint 
your  customer. 


Assure  flawless  information  hand-offs  and  make  your  systems  collaborate  the  way  75%  of  the  FORTUNE®  100  do. 

If  your  company  depends  on  partners  outside  your  control,  you  should  depend  on  Sterling  Commerce.  Only 
Sterling  Commerce  Multi-Enterprise  Collaboration  (MEC)  solutions  allow  you  to  optimize  communities,  pro¬ 
cesses  and  technology.  So  you  can  leverage  your  current  assets  with  configurable  software  and  services 
built  on  a  services-oriented  architecture,  ready  for  implementation  right  now.  You  get  visibility  into  your  entire 
value  chain  and  increased  control  moving  forward.  With  over  30,000  customers  worldwide,  we're  sure  to  have 
a  solution  that  pleases  you... and  your  customers.  Visit  us  at  www.sterlingcommerce.com 
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TECHNOLOGY 


Hard  Cores 

Multiprocessor  chips  provide 
incredible  gains  in  computing 
power.  But  for  now,  re-engineer¬ 
ing  software  applications  to  run  on 
them  is  a  daunting  task.  PAGE  28 


SECURITY  MANAGER’S  JOURNAL 

Even  a  Manager’s  Technical 
Skills  Need  Sharpening 

A  training  budget  windfall  for  her  team 
gives  C.J.  Kelly  an  idea:  She  could  use 
some  skills  enhancement  too.  PAGE  32 


FUTURE  WATCH 

It’s  All  About  the  Image 

Many  people  think  of  Xerox  as  the  copier  com¬ 
pany,  but  CTO  Sophie  Vanderbroek  says  the 
Xerox  Innovation  Group  is  working  at  the  inter¬ 
section  of  information  and  documents.  PAGE  31 


With  more 
and  more 
business 
taking  place 
via  e-mail, 
users  need 
to  manage 
content  on 
three  fronts. 

By  Sue 
Hildreth 


T  CEDARS- 
Sinai  Medical 
Center  in  Los 
Angeles,  e-mail 
is  an  integral 
part  of both 
ospital  opera¬ 
tions  and  patient  care.  The  hospital 
relies  on  e-mail  to  transmit  patient 
test  results  to  doctors,  coordinate 
the  schedules  of  residents  and  staff, 
and  send  intensive-care  unit  alerts 
to  the  pagers  of  nurses  and  physi¬ 
cians.  Physicians,  residents  and  oth¬ 
ers  use  e-mail  to  collaborate. 

“E-mail  is  a  mission-critical  appli¬ 
cation  here,”  says  Jim  Brady,  e-mail 
administrator  at  Cedars-Sinai. 

While  it’s  not  news  that  e-mail  has 
become  a  crucial  part  of  business, 
what  has  changed  is  the  sheer  quan¬ 
tity  of  valuable  business  information 
that  is  being  shared  and  stored  exclu¬ 
sively  as  electronic  mail. 

“E-mail  has  taken  over  as  the 
dominant  way  that  employees  and 
organizations  exchange  informa- 
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Re-engineering  pro¬ 
grams  to  work  on 
multicore  chips  is  al¬ 
ready  difficult  but  will 
get  even  harder  as  the 
number  of  processors 
continues  to  multiply. 

BYGARYANTHES 


PUTTING  TWO  or  more 

processor  cores  on  a  sin¬ 
gle  silicon  chip  has  been 
one  of  the  most  important 
milestones  in  computing 
in  recent  years.  It  allows 
users  to  continue  to  reap 
the  benefits  of  Moore’s 
Law  while  sidestepping 
the  extreme  difficulty  of 
manufacturing,  power¬ 
ing  and  cooling  single 
microprocessors  beyond  4  GHz.  Chip 
multiprocessors  (CMP)  also  offer  the 
opportunity  to  significantly  boost  the 
performance  of  applications  that  are 
able  to  share  them. 

But  the  benefits  of  parallel  process¬ 
ing  don’t  come  easily.  Programmers 
have  to  behave  differently,  as  do 
compilers,  languages  and  operating 
systems.  If  application  software  is  to 
reap  the  benefits  of  CMPs,  new  skills, 
techniques  and  tools  for  designing, 
coding  and  debugging  will  be  needed. 
Fortunately,  both  hardware  and  soft¬ 
ware  vendors  are  developing  tools  and 
methods  to  make  the  job  easier. 

“Multicore  chips  are  going  to  be  a 
challenge  for  software  developers  and 
compiler  writers,”  says  Ken  Kennedy, 
a  computer  science  professor  at  Rice 
University  in  Houston  who  specializes 
in  software  for  parallel  processing.  “If 
you  look  at  chip  makers’  road  maps, 
they  are  doubling  cores  every  couple 
of  years,  sort  of  on  a  Moore’s  Law  basis, 
and  I’m  worried  we  are  not  going  to  be 
able  to  keep  up.” 

Desktop  applications  that  tradition¬ 
ally  have  been  written  for  one  proces¬ 
sor  will  increasingly  be  written  to 
exploit  the  concurrency  available  in 
CMPs.  Meanwhile,  server  applications 
that  have  for  years  been  able  to  use 
multiple  processors  will  be  able  to  dis¬ 
tribute  their  workloads  more  flexibly 
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and  efficiently.  Virtualization,  another 
important  trend  in  computing  today, 
will  be  made  easier  by  CMPs  as  well. 

Keeping  up  with  CMPs  is  the  fo¬ 
cus  of  intense  activity  at  a  number  of 
companies,  including  Microsoft  Corp. 
Researchers  there  who  are  developing 
CMP  tools  are  focusing  on  two  broad 
areas:  how  to  find  errors  in  code  writ¬ 
ten  for  multiple  processors,  and  how 
to  make  it  easier  to  write  reliable  soft¬ 
ware  in  the  first  place. 

“A  lot  of  the  techniques  we  have  used 
with  sequential  code  don’t  work  as  well, 
or  at  all,  with  parallel  programs,”  says 
Jim  Larus,  manager  of  programming 
languages  and  tools  at  Microsoft  Re¬ 
search.  “In  testing,  you  typically  run 
your  program  with  a  lot  of  data,  but  with 
parallel  programs,  you  could  run  your 
program  1,000  times  with  the  same  data 
and  get  the  right  answer,  but  on  the 
1,001st  time,  an  error  manifests  itself.” 

This  ugly  trait  results  from  “race” 
conditions  in  parallel  code,  in  which 
one  process  is  expected  to  finish  in  time 
to  supply  a  result  to  another  process  — 
and  usually  does.  But  because  of  some 
anomaly  such  as  an  operating  system 
interrupt,  occasionally  it  does  not.  Such 
bugs  can  be  extremely  hard  to  find  be¬ 
cause  they  are  not  readily  reproducible. 

The  tools  Larus’  group  is  develop¬ 
ing  allow  more  controlled  testing  so  a 
programmer  can,  for  example,  vary  the 
timing  of  two  threads  to  check  for  race 


errors.  The  tools  will  eventually  be 
offered  commercially  as  part  of  Visual 
Studio,  Larus  says,  “but  we  have  a  long 
way  to  go.” 

Microsoft  Research  is  also  trying  the 
KISS  —  or  “keep  it  strictly  sequential” 
—  model.  KISS  transforms  a  concur¬ 
rent  program  into  a  sequential  one  that 
simulates  the  execution  of  the  concur¬ 
rent  program.  The  sequential  program 
can  then  be  analyzed  and  partially  de¬ 
bugged  by  a  conventional  tool  that  only 
needs  to  understand  the  semantics  of 
sequential  execution. 

Microsoft  and  others  are  also  work¬ 
ing  on  a  new  programming  model 
called  software  transactional  memory, 
or  STM.  It’s  a  way  to  correctly  syn¬ 
chronize  memory  operations  without 
locking  —  the  traditional  way  to  avoid 
timing  errors  —  so  that  problems  such 
as  deadlocking  are  avoided.  STM  treats 
a  memory  access  as  part  of  a  trans¬ 
action,  and  if  a  timing  conflict  occurs 
with  some  other  operation,  the  trans¬ 
action  is  simply  rolled  back  and  tried 
again  later,  similar  to  the  way  today’s 
database  systems  work. 

“The  idea  is  that  the  programmer, 
instead  of  specifying  at  a  very  low  level 
how  to  do  this  synchronization,  basical¬ 
ly  says,  All  the  code  between  this  point 
in  the  program  and  this  other  point,  I 
want  to  behave  as  if  it  were  the  only 
thing  accessing  data  at  this  time.  System, 
go  make  that  happen,’  ”  says  Larus. 


THE  MANY  FACETS  OF  MULTIPROCESSING 


Intel’s  Pentium  Processor  Extreme  Edition  uses  two  processor  cores,  each  with  its  own  on-chip  cache 
and  each  running  at  the  same  speed.  Using  Intel's  Hyper-Threading  Technology,  each  core  functions  as  two 
logical  processors,  enabling  four-thread  functionality,  in  this  example  balanced  between  integer  and  floating¬ 
point  arithmetic.  The  processor  can  run  multiple  applications  simultaneously  with  background  tasks  such 
as  real-time  security  and  system  maintenance.  The  chip  also  can  use  Intel’s  Virtualization  Technology  to  run 
multiple  operating  systems  and/or  applications  in  independent  partitions. 
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Even  a  Manager’s  Tech 
Skills  Need  Sharpening 


A  training  budget  windfall  for  her  team  gives 
our  manager  an  idea:  She  could  use  some 
skills  enhancement  too.  By  C.  J.  Kelly 


ONE  OF  the  things 
IT  managers  face 
is  losing  touch 
with  the  technical 
aspects  of  the  projects  they 
manage.  That’s  OK  if  you’ve 
got  plenty  of  talented  people 
working  for  you.  But  when 
you  have  a  small  staff  and  lose 
a  key  person,  you  have  to  be 
able  to  step  in  and  do  the  work 
yourself. 

Personally,  I  have 
always  tried  to  stay 
as  hands-on  as  possi¬ 
ble  without  losing  my 
vision  of  the  overall 
strategy.  Technical 
people  often  get  hung 
up  on  the  details  and  forget  to 
step  back  to  see  the  big  picture. 
A  good  manager  keeps  the  vi¬ 
sion  in  mind  and  guides  the 
team  in  the  direction  of  what’s 
good  for  the  business,  which 
does  not  always  jibe  with  what 
the  technical  team  thinks  is 
important  to  focus  on. 

In  my  realm,  this  plays  out 
with  me  reining  in  the  most 
severe  security  impulses  of 
the  professionals  who  work 
for  me  while  ensuring  that  se¬ 
curity  is  tight.  They  want  the 
network  locked  down  as  much 
as  possible,  as  they  should.  I 
do  too,  but  I  have  to  keep  in 
mind  our  users  and  the  ef¬ 
ficient  functioning  of  the  state 
agency  we  work  for. 

For  example,  I  don’t  want 
users  to  be  forced  to  choose  a 
very  strong  password  that  has 
to  be  changed  every  30  days. 
The  security  professional  in 
me  knows  that  every  incre¬ 
ment  of  protection  helps,  but 
the  manager  in  me  knows  that 
users  resist  strictures  that 
constrain  efficient  work  habits. 
If  you  institute  practices  that 


users  will  ignore  or  circum¬ 
vent  —  by  posting  their  strong 
passwords  on  their  monitors, 
for  instance  —  you’ve  done 
nothing  to  increase  your  secu¬ 
rity  profile. 

But  how  does  a  manager 
stay  hands-on  when  skills  are 
constantly  being  ratcheted  up? 

We  had  a  windfall  in  train¬ 
ing  dollars  this  year.  A  lot  of 
training  money  had 
gone  unused;  it  was 
as  if  Christmas  had 
fallen  at  the  end  of 
the  fiscal  year  in¬ 
stead  of  the  end  of 
the  calendar  year. 

I  set  to  work  right 
away  assessing  the  skills  of 
the  team  and  the  areas  where 
we  needed  to  get  stronger. 
Then  it  dawned  on  me:  I  could 
use  some  additional  training 
myself. 

Managers  don’t  usually 
go  off  to  get  more  technical 
training.  But  my  team  is  small 
and  often  needs  me  to  pitch 
in,  so  why  not?  I’m  not  look¬ 
ing  for  additional  credentials. 

I  already  have  an  advanced 
degree  and  four  certifications 
(which  mean  nothing  in  some 
circles  and  a  great  deal  in  oth¬ 
ers,  but  that’s  another  story). 
I’m  looking  to  enhance  my 
skills  so  I  will  better  under¬ 
stand  what  my  employees  are 


£  What  I 

H  need  is 

I  an  in-depth 
|  understanding  of 
Inetworking  tech¬ 
nologies  as  they 
relate  to  security. 


doing  and  how  I  can  help  them. 
What  I  need  is  an  in-depth 
understanding  of  networking 
technologies  as  they  relate  to 
security.  The  thought  that  I 
could  send  my  entire  team  off 
to  enhance  their  skills  and  still 
have  money  to  make  myself 
more  effective  in  my  job  got 
me  kind  of  excited. 

First,  I  turned  my  attention 
to  what  my  team  needed.  Our 
environment  runs  primarily 
on  Microsoft  and  Cisco  prod¬ 
ucts,  and  training  in  those 
two  areas  would  be  the  focus. 

I  went  to  the  team  members 
and  asked  them  to  decide  what 
they  needed  and  pick  training 
courses.  Their  choices  were 
amazingly  in  sync  with  what  I 
thought  they  required.  Hooray 
for  communication!  I  made 
just  a  couple  of  adjustments 
that  everyone  immediately 
agreed  to. 

Back  to  School 

Then  it  was  my  turn.  What 
were  my  knowledge  gaps?  For 
me,  my  No.  1  training  prior¬ 
ity  was  clear.  I  had  always 
wanted  to  achieve  the  CCIE 
(Cisco  Certified  Internetwork 
Expert).  Many  years  ago,  I 
purchased  the  entire  study 
series,  including  the  hands-on 
lab  guide.  From  time  to  time,  I 
pick  up  those  books  and  read 
a  few  chapters.  I  also  use  them 
as  reference  materials  when 
network  problems  come  up. 

I’ve  probably  learned  a  lot 
just  by  having  those  books 
close  at  hand.  But  I  haven’t 
made  any  real  progress  toward 
the  CCIE.  I’ll  have  to  start  at 
the  beginning  by  achieving 
the  CCNA  (Cisco  Certified 
Network  Associate)  and  build 
upon  that.  But  I  want  to  get 
through  that  quickly  so  I  can 
move  on  to  the  good  stuff. 

My  plan  is  to  take  an 
e-learning  course  for  the 
CCNA.  I’ll  kick  my  way 
through  that  in  a  month 
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or  two,  take  the  exam  and 
check  that  off  my  list.  (If 
only  I  could  do  the  BaselO  to 
Base2  to  Hex  conversions  in 
my  head!)  Then  on  to  the  ad¬ 
vanced  training.  I  want  to  un¬ 
derstand  the  functioning  and 
applicability  of  every  security 
feature  of  every  Cisco  device 
imaginable,  from  switches 
and  routers  to  firewalls  and 
virtual  private  networks  to 
intrusion-detection  and 
-prevention  systems. 

So  my  goal  this  year,  after  I 
get  the  CCNA  out  of  the  way, 
is  to  achieve  the  next  level 
of  training  up  from  that,  the 
CCSP  (Cisco  Certified  Secu¬ 
rity  Professional).  I  can  take 
a  class  at  the  end  of  this  year. 

It  will  require  me  to  be  gone 
from  the  office  for  two  straight 
weeks  while  I  endure  12-hour 
days  cramming  this  stuff  into 
my  brain.  But  I  will  be  on  the 
road  at  last  to  that  top-level 
certification. 

I’ve  said  it  before:  I’m  lucky 
to  have  a  good  boss.  When  I 
told  him  what  I  wanted  to  do, 
he  understood  where  I  was 
coming  from  and  approved 
all  my  training.  Like  me,  he 
understands  how  important  it 
is  to  keep  up  with  the  technol¬ 
ogy  in  a  real  and  practical  way. 
He’s  a  closet  coder  himself, 
often  developing  programs  we 
need  over  the  weekends. 

My  Cisco  training  is  going 
to  cost  about  $10,000.  That’s  a 
lot  of  money  to  spend  on  tech¬ 
nical  training  for  a  manager. 
But  if  I  had  to  hire  someone 
with  these  skills,  it  would  cost 
us  well  over  six  figures  a  year. 
State  agencies  usually  can’t 
afford  to  hire  talent  at  Silicon 
Valley  wages,  even  though 
state  and  federal  governments 
are  required  to  secure  their 
networks  at  a  high  degree  of 
sophistication.  Well,  we  can 
pay  the  piper  now  or  later. 
We’ll  do  it  now.  > 


WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  “C.J.  Kelly,”  whose  name 
and  employer  have  been  disguised  for 
obvious  reasons.  Contact  her  at  mscjkelly® 
yahoo.com,  or  join  the  discussions  in  our 
security  blogs:  computerworld.com/ 
blogs/security 

To  find  a  complete  archive  of  our  Security 
Manager’s  Journals,  go  online  to 

computerworld.com/secjournal 


Report  Cites  Threat 
Of  Cyberterrorism 

In  a  report  titled  “Essen¬ 
tial  Steps  to  Strengthen 
America’s  Cyber  Terrorism 
Preparedness,”  the  Busi¬ 
ness  Roundtable  says  that 
the  U.S.  “is  not  sufficiently 
prepared  for  a  major  attack 
. . .  that  would  lead  to  dis¬ 
ruption  of  large  parts  of  the 
Internet.”  The  report  identi¬ 
fies  three  “cyber  gaps”:  the 
lack  of  “tripwires"  to  indi¬ 
cate  that  an  attack  is  under 
way,  a  failure  to  clearly 
identify  who  is  responsible 
for  restoring  the  infrastruc¬ 
ture  and  a  lack  of  resources 
for  doing  the  same.  The 
report’s  several  recommen¬ 
dations  are  divided  between 
the  government  and  the 
private  sector. 


Contractor ! 
Sabotage  Charge 

Richard  F.  Sylvestre  has 
been  charged  with  gain¬ 
ing  unauthorized  access 
to  a  government  national 
defense  computer  and  al¬ 
legedly  putting  malicious 
software  on  computers  at 
the  U.S.  Navy’s  European 
Planning  and  Operations 
Command  Center  in  Naples, 
Italy.  Sylvestre  owns  Ares 
Systems  International  Corp., 
which  has  done  contract 
work  for  the  Navy.  He  was 
allegedly  angry  that  his  bid 
for  another  project  was  not 
accepted.  The  infection 
could  have  brought  down 
the  network,  which  is  used 
to  track  submarine  and  ship 
locations 


Arrested  in  India 

Police  in  Bangalore,  India, 
have  reportedly  arrested  an 
employee  of  an  HSBC  Bank 
PLC  data  processing  center. 
Nadeem  Kashmiri  alleg¬ 
edly  supplied  others  with 
information  that  allowed 
them  to  steal  $426,000 
from  the  accounts  of  HSBC 
customers. 
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The  Paradox 
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lultiple  layers  of  security  make  life  harder  for  threats 
Multiple  layers  of  security  make  life  harder  for  you. 


The  Answer:  Proven  security. 


Anti-Spam  &  Anti-Spyware 


Network  Access  Control 


Intrusion  Prevention 


Desktop  Firewall 
E-Mail  Security 


Anti-Virus: 


Security  threats  are  mounting  in  number — and  they’re  evolving  in  complexity.  Your  security  must  evolve  as  well. 

This  used  to  mean  managing  multiple  products  without  integration,  which  created  operational  challenges,  risk,  and 
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increasing  costs.  Not  any  more.  With  McAfee  Total  Protection  for  Enterprise,  you’ll  have  comprehensive,  integrated 
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protection.  You’ll  control  everything — from  anti-virus  to  network  access  control  to  anti-spyware — all  from  a  single  '  -  -  :  .r. 

management  console.  McAfee  Total  Protection  solutions  are  engineered  to  provide  maximum  manageability  and 
deliver  total  endpoint  security  without  compromise.  McAfee,  the  dedicated  security  company  that  blocked  or  contained 
100%  of  the  top  attacks  in  2005,  delivers  proven  results  backed  by  more  than  15  years  of  experience.  Secure  your  , , 

businessadvantage.Learnmoreatwww.mcafee.com/total  r  , 
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Proven  Security™ 
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Top  fist  of  attacks  os  reported  tjy  Wildlist  oicj  and  McAfee  AVERT  Labs  McAfee  and/or  additional  marks  herein  are  legistereri  trademarks  ot  trademarks  of  McAfee,  Inc  and/or  its  affiliates  in  the  U.S  and/or  other  countfies 
McAfee  Red  in  connection  with  ^Security  is  distinctive  of  McAfee  brand  products.  All  other  registered  and  unregistered  trademarks  herein  are  the  sole  property  of  their  respective  owners.  ©  2006  McAfee,  Inc,  All  rights  resei/veci,' 
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What  will  be  your  biggest 
management  challenge 
in  the  next  three  months?* 
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management 

*Top  five  responses 
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What  changes  do  you  expect 
in  IT  head  count  in  the 
next  three  months? 


Increase 

31%* 


No  change 

61% 


Decrease 

mr 

•Average  increase:  13%  "Average  decrease:  14% 


Rate  your  ability  to  recruit  key 
IT  talent  compared  with 
this  time  last  year. 


More  difficult 


The  same 

41% 


Less  difficult 

« 


How  does  the  IT  staff  turnover  rate 
at  your  company  compare  with 
this  time  last  year? 

Uinha*- 


The  same 


Base:  300  IT  professionals 


Lower 


“Rewind  to  this  time  last  year:  It  was 
a  lot  easier  to  get  resumes  in,  and  we 
had  a  lot  more  qualified  candidates 
coming  in  for  interviews,”  says  Mark 
Christopulos,  an  IT  portfolio  manager 
at  AAA  of  Northern  California  in  San 
Francisco.  “Now  we’re  in  the  situation 
where  we’re  doing  trade-offs:  We  need 
to  get  someone  in  now,  so  which  one 
do  we  take?  Before,  we  were  really  ex¬ 
cited  about  bringing  the  people  in.” 

The  ongoing  economic  uptick  is 
clearly  at  work,  Christopulos  says. 
“We’re  noticing  a  lot  of  people  who 
were  available  a  year  ago  are  now  em¬ 
ployed,”  he  says,  adding  that  workers’ 
perceptions  of  the  tighter  labor  market 
affect  retention  as  well.  “We’re  starting 
to  see  turnover  a  little  bit  higher  than 
it  was  previously.  It’s  not  a  problem, 
but  it  is  noticeable.  Last  year,  people 
just  didn’t  move  on.  There  weren’t  a 
whole  lot  of  people  changing  jobs.” 

In  the  Vital  Signs  survey,  41%  of  IT 
leaders  reported  that  it’s  more  difficult 
to  recruit  key  IT  talent  this  year  than 
it  was  last  year.  And  24%  said  their  IT 
staff  turnover  rate  is  higher  now  than 
it  was  in  2005. 

Stephanie  Moore,  an  analyst  at 
Forrester  Research  Inc.,  says  such 
responses  might  indicate  that  employ¬ 
ers  need  an  attitude  adjustment.  They 
were  so  spoiled  during  the  years  im¬ 
mediately  following  the  dot-com  bust, 
she  says,  that  they  haven’t  realized  that 
the  labor  market  is  now  more  balanced 
between  employer  and  worker. 

“There  was  such  a  plethora  of  candi¬ 
dates  available  four  years  ago,”  Moore 
says.  “They  were  used  to  it  being  an 
employer’s  market.” 

Still,  the  situation  has  some  execu¬ 
tives  re-examining  their  employment 
policies  to  focus  on  what’s  working  and 
what’s  not.  Some  say  they’re  beginning 
to  feel  pressure  to  raise  salaries  as  a 
way  to  recruit  the  right  talent. 

Broadwater  says  that  as  the  market 
tightens,  a  certain  amount  of  attrition 
is  nearly  inevitable.  “We  can’t  compete, 
being  a  nonprofit,  with  the  for-profit 
organizations  in  terms  of  salaries,”  he 
says. 

But  Broadwater  notes  that  his 
organization  offers  perks  that  help 
compensate  for  salary  shortcomings. 
Sesame  Workshop  has  a  comprehen¬ 
sive  benefits  package,  including  tuition 
reimbursement,  as  well  as  a  good  work 
environment  without  a  lot  of  stress 
and  where  people  work  well  together 
and  receive  ongoing  training,  he  says. 
Plus,  the  organization  produces  a 
product  —  Sesame  Street  —  that 
people  believe  in. 

But  he  doesn’t  rely  solely  on  those 


factors  to  draw  in  qualified  people.  He 
also  taps  into  his  executive-level  con¬ 
tacts  at  major  vendors  for  referrals  to 
qualified  people  looking  for  new  jobs. 

All  the  same,  Broadwater  has  con¬ 
cerns  about  his  future  ability  to  attract 
people  with  the  right  skills,  specifically 
those  who  can  maintain  legacy  systems. 

Skills  Search 

Others,  though,  say  they’re  having 
more  trouble  finding  people  with  some 
of  the  newer  skill  sets.  For  Christopu¬ 
los,  the  biggest  challenge  is  attracting 
project  and  program  managers. 

Eileen  D.  Heveron,  associate  vice 
president  of  IT  at  National  University 
in  La  Jolla,  Calif.,  says  workers  with  ex¬ 
perience  in  both  PeopleSoft  program¬ 
ming  and  higher  education  are  the 
hardest  to  hire  and  retain,  followed  by 
workers  with  Web  development  skills. 
“They’re  in  demand,  and  there’s  just  not 
enough  of  them,”  she  says. 

And  for  Jon  Elsasser,  senior  vice 
president  and  CIO  at  The  Timken  Co. 
in  Canton,  Ohio,  people  with  storage 
systems  knowledge  are  the  toughest 
to  find  and  keep.  He  says  companies 
that  have  been  forced  to  improve 
their  document-retention  policies  by 
recent  federal  regulations,  such  as  the 
Sarbanes-Oxley  Act,  are  increasing  de¬ 
mand  for  such  skills. 

Indeed,  data  management/busi¬ 
ness  analytics  was  among  the  top  five 
technologies  that  Vital  Signs  survey 
respondents  said  they  consider  most 
critical  to  their  companies  today.  Data 
security/privacy,  disaster  recovery/ 
continuity  planning,  antivirus  protec¬ 
tion  and  servers  also  landed  in  the 
top  five. 

The  key  skill  sets  in  demand  are 
far  broader.  Wallace  Dalrymple,  chief 
network  and  telecommunications  ar¬ 
chitect  in  the  emerging  technologies 
group  at  General  Motors  Corp.,  says 
demand  is  greatest  for  network  en¬ 
gineers  and  database  administrators, 
along  with  workers  who  have  business 
intelligence,  data  warehousing  and  se¬ 
curity  skills. 

And  within  application  development, 
.Net  expertise  seems  to  be  particularly 
hot  right  now,  Wood  says. 

As  competition  for  key  skills  heats 
up,  some  CIOs  are  rethinking  em¬ 
ployment  policies.  Consider  what’s 
happening  at  Timken,  which  makes 
engineered  bearings,  alloy  steels  and 
related  products.  Elsasser  says  the 
company  is  starting  to  let  people  work 
from  home,  because  more  and  more 
workers  live  farther  away  from  the 
office  than  in  the  past.  The  company 
may  also  establish  a  satellite  office  so 


far-flung  workers  don’t  always  have  to 
drive  to  headquarters. 

Moreover,  although  Elsasser  has 
used  outsourcing  to  augment  his  staff 
for  limited  periods  of  time  and  does 
send  some  development  and  support 
work  to  India,  he  says  he’s  looking  at 
whether  “structural  outsourcing”  — 
outsourcing  certain  skills  for  the  long 
term  —  makes  sense,  especially 
if  he  has  a  hard  time  finding  people 
with  particular  skills. 

Some  IT  managers  are  already  at 
that  point.  “In  a  lot  of  cases,  we’re 
forced  to  use  contractors  because  we’re 
not  able  to  find  the  qualified  employ¬ 
ees,”  Christopulos  says. 

But  not  all  are  convinced  that  out¬ 
sourcing  and  offshoring  are  the  solu¬ 
tions.  Some  IT  leaders  point  out  that 
their  companies’  needs  are  too  small  to 
make  offshoring  financially  viable,  and 
Wood  says  Floridians  —  the  people  his 
organization  serves  —  “don’t  want  to 
read  that  tax  dollars  are  going  to  India.” 

Broadwater  says  experience  has 
taught  him  that  using  in-house  talent  is 
the  best  value  proposition.  “We  found 
that  people  fully  invested  in  the  com¬ 
pany  —  who  believe  in  it  and  are  here 
full-time  —  stay  longer  and  provide 
better  customer  service,”  he  says. 

That  kind  of  thinking  can  change, 
however,  as  IT  leaders  are  challenged 
to  implement  new  technologies  and 
processes  aimed  at  driving  business 
results  —  without  increasing  their 
budgets  or  head  counts.  Although  46% 
of  respondents  said  they  expect  their 
budgets  to  increase  in  the  upcoming 
12  months,  nearly  as  many  —  43% 

—  expect  their  budgets  to  remain  flat. 
And  61%  said  they  don’t  expect  to  in¬ 
crease  the  number  of  IT  staffers  in  the 
next  three  months. 

Given  all  that,  it’s  no  surprise  that 
managing  projects  and  budget  con¬ 
straints  topped  the  list  of  management 
challenges  among  surveyed  executives. 

Heveron  offers  a  broader  perspective 
on  the  biggest  challenge  facing  CIOs 
today.  She  says  they  must  “deliver  on 
time  and  on  budget,  keep  satisfaction 
up  and  downtime  at  zero”  while  imple¬ 
menting  the  latest  technologies  without 
drastic  budget  run-ups  or  increased 
head  counts  —  all  in  an  increasingly 
tight  labor  market.  * 


Pratt  is  a  Computerworld  contributing 
writer  in  Waltham,  Mass.  Contact  her  at 
marykpratt@verizon.net. 

COMPREHENSIVE  CHECKUP 

For  more  results  of  our  Vital  Signs  survey 
and  respondent  demographics,  visit 

www.computerworld.com. 
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BY  DAVID  RATHS 


STEERIN6  THE 


HERE’SHOWTOGETTHEMOSTOUT 
OF  YOUR  EXECUTIVE  OVERSEERS. 


Alignment  remains  a  hot  topic  for 
CIOs  because  many  organizations 
are  still  struggling  to  get  senior 
business  executives  and  IT  lead¬ 
ers  on  the  same  page.  Fifty-six  percent  of 
IT  departments  understand  and  support 
their  business  users’  needs  “to  a  large 
extent,”  according  to  a  2005  IT  Gover¬ 
nance  Institute  survey  of  almost  700 
CIOs  and  CEOs.  But  that  still  leaves  44% 
in  need  of  improvement.  Many  com¬ 
panies  use  IT  steering  committees  to 
provide  guidance  and  prioritize  technol¬ 
ogy  projects.  Yet  guiding  the  activities 
of  these  groups  and  getting  the  most  out 
of  their  efforts  can  be  tricky.  Computer- 
world  asked  four  IT  executives  for  their 
ideas  on  how  to  work  with  steering  com¬ 
mittees.  Here’s  what  they  told  us. 

LYNNE  ELLYN, 

CIO,  DTE  ENERGY  CO. 

Nget  the  finance 

staff  involved  early. 
Detroit-based  DTE 
holds  quarterly  IT  steering  committee 
meetings  to  approve  projects.  Ellyn 
says  that  in  the  past,  some  executives’ 
pet  projects  were  pushed  through 
despite  weak  business  cases.  So  the 
committee  decided  that  before  a  vice 
president  makes  an  IT  project  proposal, 
he  has  to  persuade  the  controller  for 
his  business  unit  to  sign  off  on  the  plan. 
Now,  she  says,  the  IT  steering  com¬ 
mittee  rarely  turns  down  a  proposal, 
because  the  weak  ones  are  weeded  out 
earlier  in  the  process  by  the  depart¬ 
mental  financial  execs. 

let  the  objective  become 
managing  IT  costs.  Ellyn 
says  there’s  a  common 
perception  that  steering  committees 
should  focus  on  IT  cost  containment, 
but  don’t  let  that  view  take  hold.  “The 
charter  should  be  to  maximize  the 
performance  of  the  organization,”  she 
says.  Ellyn’s  committee  looks  at  the 
business  case  for  individual  IT  proj¬ 
ects  from  a  cross-functional  perspec¬ 
tive.  Cost  savings  are  laid  out  in  the 
project  plans,  and  future  budgets  are 
adjusted  for  those  expected  savings, 
she  adds. 


BRENT  ZEMPEL,  CIO, 

LIFE  TIME  FITNESS  INC. 

consider  a  two- 
tiered  structure. 

A  few  years  ago, 
Zempel  developed  two  IT  steering  com¬ 
mittees  instead  of  one  for  Life  Time,  an 
Eden  Prairie,  Minn.-based  company 
that  runs  48  fitness  centers  in  nine 
states.  The  decision  “changed  my  life,” 
he  says,  because  each  group  is  focused 
appropriately.  The  executive  IT  steering 
committee  ranks  projects,  and  a  lower- 
level  committee  of  line  managers  and  IT 
staffers  handles  the  project  specifics. 

Zempel  attends  quarterly  strategic 
vision  sessions  of  an  executive  manage¬ 
ment  team.  Then  he  brings  a  list  of  proj¬ 
ects  related  to  that  vision  to  the  execu¬ 
tive  steering  committee.  “All  I  ask  is  that 
they  rank  the  projects,”  he  says. 

Once  the  projects  are  prioritized,  the 
lower-level  steering  committee  develops 
a  Gantt  chart  to  track  how  it’s  going  to 
deliver  the  top  priorities.  “Those  people 
a  tier  down  on  the  organizational  scale 
are  the  ones  feeling  the  pain  from  not 
having  some  sort  of  technological  solu¬ 
tion,”  Zempel  says.  “They  are  much 
more  aware  of  the  specific  business  is¬ 
sues  the  project  needs  to  address.” 

m  brainstorm  about  technol- 
I  ogy.  Zempel  says  that  in 
I  the  past,  the  executive- 
level  IT  meetings  sometimes  got  mud¬ 
dled  up  in  pie-in-the-sky  proposals  or 
questions  that  were  too  detailed.  After 
such  unfocused  discussions,  executives 
would  walk  out  of  the  meetings  more 
confused  than  when  they  came  in,  he 
says,  and  explaining  how  complex  it 
would  be  to  accomplish  some  of  their 
ideas  put  Zempel  in  a  defensive  position. 
“That’s  when  I  changed  it  to  just  asking 
them  to  prioritize  projects,”  he  says.  “I’m 
trying  to  build  relationships  with  them 
and  deliver  technology  recommenda¬ 
tions  based  on  their  vision.” 


AKHILTRIPATNI,CIO, 

HARLEYSVILLE  INSURANCE 

insist  that  the  busi¬ 
ness  executives 
make  the  case 
for  a  project.  Tripathi  requires  his  IT 
governance  board  to  hear  directly  from 
business  leaders  about  the  need  for  tech¬ 
nology  investments  and  the  expected 
business  value.  The  business  case 
makes  more  sense  to  the  other  execu¬ 
tives  that  way,  he  says. 

At  a  recent  IT  governance  board 
meeting,  the  Harleysville,  Pa.-based 
insurer’s  chief  underwriting  officer 
led  a  presentation  on  a  major  software 
project  with  assistance  from  the  lead 
IT  employee  on  the  project. 

“If  we  didn’t  do  that,  it  would  be 
perceived  as  an  IT  project  without  a 
champion,”  Tripathi  says.  “Also,  if  we 
didn’t  discuss  it  at  the  governance 
board,  we  wouldn’t  necessarily  hear 
from  other  parts  of  the  organization  on 
how  a  project  might  affect  them.” 

I^get  swamped  in  minu- 
1  tiae.  “Keep  the  noise 
I  out,”  Tripathi  says.  Some 
IT  leaders  spend  steering  committee 
meetings  doing  updates  on  mainte¬ 
nance  and  support  costs,  which  he 
says  is  a  bad  idea.  “We  have  set  a 
dollar  and  staff  threshold,  and  the  IT 
governance  board  does  not  hear  about 
projects  below  that,”  Tripathi  explains. 
Board  members  get  a  summary  sheet 
with  maintenance  costs  broken  down 
by  business  line,  but  it  is  not  discussed 
in  detail  at  the  meeting.  Projects  of 
$50,000  or  less  are  handled  by  lower- 
level  line  managers.  “Otherwise,  you 
get  bogged  down  with  people  say¬ 
ing  your  mainframe  was  down  for  x 
amount  of  time,”  Tripathi  says.  “This 
is  not  the  place  for  that.  This  meeting 
should  remain  focused  on  business 
strategy,  not  on  service  levels  or  cost 
containment.” 


TOM  SCHNEIDER,  DIRECTOR  OF  IT, 

TRUSTREET  PROPERTIES  INC. 


mab  nw  give  IT  a  vote  on  projects, 
f  II  I  When  he  created  an  IT 
I/Bw  1  I  steering  committee  at  the 
Orlando-based  real  estate  investment 
trust  in  January,  Schneider  was  trying 
to  address  the  widespread  perception 
among  business  managers  that  IT  was 
shoving  projects  down  their  throats. 
“We  needed  more  buy-in,”  he  says.  He 
declared  IT  staff  a  nonvoting  resource 
to  the  organization.  “That  takes  that  is¬ 
sue  right  off  the  table,”  he  says.  “It  puts 
us  in  more  of  a  supportive  role  and  not 
so  much  in  the  cross  hairs.”  Now,  every¬ 
one  understands  that  a  project’s  sponsor 
will  be  a  business  unit,  not  IT,  he  says, 
minimize  time  commitments. 

|  Schneider  has  worked  with  the 
steering  committee  to  stream¬ 
line  meetings,  which  were  unwieldy 
and  difficult  to  arrange.  He  reduced  the 
number  of  attendees  from  12  to  nine 
and  replaced  the  committee  chairman, 
who  didn’t  always  have  time  to  attend 
the  whole  session.  Schneider  also  dis¬ 
tributes  project  proposals  in  advance  so 
the  members  can  come  prepared.  “But  it 
requires  that  they  do  their  homework,” 
he  says.  * 


DO 


Raths  is  a  freelance  writer  in  Portland, 
Maine.  He  can  be  contacted  at  draths@ 
maine.rr.com. 


STEERING  COMMITTEE  STATS 

Does  your  firm  have  a  formal  IT  steering  committee? 


How  often  does  your  formal 
IT  steering  committee  meet? 


ONCE  A YEAR 
TWICE  A  YEAR 
ONCE  A  MONTH 
ONCE  A  QUARTER 

Base:  65  North  American 
IT  decision-makers. 
Percentages  may  not  equal 
100%  because  of  rounding. 


SOURCE:  FORRESTER  RESEARCH  INC..  OCTOBER  2005 


